A quantum algorithm for one-shot signatures


This is a companion discussion topic for the original entry at https://arxiv.org/abs/2606.23612