On the Security of the Algebraic Surface Signature Scheme