Subversion-resilient signature schemes