ch a hash-based digital signature would fail if its underlying hash function failed at second-pre-image resistance, but this is the only way that it could be brokenany attack which was able to forge digital signatures against such a scheme would have to violate the second-pre-image resistance of the underlying hash function.