On the security and the efficiency of the Merkle signature scheme
cryptographic hash - function basics : definitions , implications and separations for preimage resistance , second - preimage resistance , and collision resistance .