"Hash Function Requirements for Schnorr Signatures" by G. Neven, P. Smart & Warinschi.

http://www.neven.org/papers/schnorr.pdf