[research] GMSS

[sunny-g]

This paper outlines an approach of enhancing CMSS to reduce signing time by "distributing the costs for one signature generation across several previous signatures and the key generation" which makes it possible to "to achieve a signature capacity of 2^80 with competitive timings and reasonable signature sizes, i.e. 26.1 ms for signing, 18.1 ms for verifying, and 3,620 bytes for the signature."