Linearly Homomorphic Signature Schemes