This question already has an answer here:

What is the primary reason the developers chose Winternitz signatures?

marked as duplicate by Helmar, Richard Horrocks, ben75, Robert Cartaino Jan 18 '18 at 17:22

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


Firstly, it is to be quantum-secure:

And secondly because there aren't many alternative quantum-secure signature schemes to begin with:

Not the answer you're looking for? Browse other questions tagged or ask your own question.