How to Prove False Statements: Practical Attacks on Fiat-Shamir [pdf]