On the Random-Oracle Methodology as Applied to Length-Restricted Signature Schemes