 The number of possible messages must be a power of two, so we denote the possible number of messages as formula_2.The first step of generating the public key formula_1 is to generate formula_4 private/public key pairs formula_5 of some one-time signature scheme (such as the Lamport signature scheme).For each formula_6, a hash value of the public key formula_7 is computed.