On the security of the Winternitz one-time signature scheme
Better than BiBa: Short One-Time Signatures with Fast Signing and Verifying