During my master thesis I came across RSA-PSS-R which is in my opinion a quite elegant way of saving bandwidth and space using digital signature. But I didn't find any information about any real world implementation out there. I have the feeling that it's exactly like the Schnorr Signature scheme. Everybody says that it is very efficient, but no one actually uses it.
Maybe I didn't dig deep enough but is there anyone out there actually using message recovery AT ALL in any real world implementation?
Thank you for your feedback