Twin signatures: an alternative to the hash-and-sign paradigm