1

What is the primary reason the developers chose Winternitz signatures?

1

Firstly, it is to be quantum-secure:

And secondly because there aren't many alternative quantum-secure signature schemes to begin with:

Not the answer you're looking for? Browse other questions tagged or ask your own question.