One‑time signature scheme using hash functions; basis for post‑quantum XMSS and SPHINCS.