No. 52 (2001): RS-52 Extracting Witnesses from Proofs of Knowledge in the Random Oracle Model