Security analysis of the W-OTS${}^{+}$ signature scheme: Updating security bounds

M. A. Kudinov, E. O. Kiktenko, A. K. Fedorov

In this work, we discuss in detail a flaw in the original security proof of the W-OTS${}^{+}$ variant of the Winternitz one-time signature scheme, which is an important component for…