On the security of the Winternitz one-time signature scheme
Keying Hash Functions for Message Authentication