Implement Schnorr signatures in G1 for the proof of knowledge

[algoradam]

The BLS proof of possession isn't actually a ZKPoK -- you can't rewind to extract the exponent -- so it's not enough to make the security proof work. A Schnorr signature should be used instead