Zaslat záznam e-mailem: Cryptanalysis and design of signature schemes with identity ambiguity in the standard model