Hash-based signatures V - Few-times signatures

This lecture is part of Post-quantum cryptography" part of
the MasterMath course "Selected Areas in Cryptology"

For details see the course page
https://hyperelliptic.org/tanja/teaching/pqcrypto22/

Slides are at
https://hyperelliptic.org/tanja/teaching/pqcrypto22/hash-mm-5.pdf