Practical lattice-based cryptography: A signature scheme for embedded systems
XMSS -- A practical forward secure signature scheme based on minimal security assumptions