codecrypt/doc/papers/hash_signatures_2Mss.pdf