How to prove false statements: Practical attacks on Fiat-Shamir