pqc@bunker: ~/verifywots-sha256 · w=16
pqc@bunker:~$ wots verify --live
># signσ[i] = H^d[i](sk[i])
# verifypk[i] =? H^(15-d[i])(σ[i])
# compressℓ = H(pk[0] || … || pk[66])
# climbroot =? H(…H(ℓ || a[0])… || a[7])
msg --------------------------------
leaf--------------------------------
root 0/8--------------------------------
[ .. ] signing message
