Security of interactive DSA batch verification

The authors show that the interactive DSA (digital signature algorithm) batch transaction protocol proposed by Naccache et al. (see Pre-Proceedings Eurocrypt'94, p. 85-94, 1994) is not secure.