A Constant-Size Signature Scheme with a Tighter Reduction from the CDH Assumption