Efficient Digital Public-Key Signatures with Shadow