A few-time signature (FTS) lets one key pair sign a small number of messages, unlike a one-time signature that must never reuse its key. Reuse beyond the intended limit can enable signature forgeries. section 14.2.3
FTS improves on one-time signatures, but only within a strict reuse budget:
- Draws combinations of secrets from a pool, relying on a low probability of repeating the same combination. section 14.2.3
- Reduces the risk of key reuse compared with Lamport signatures and WOTS, while still failing if reused too many times. section 14.2.3
- Does not provide the broad reuse supported by many-time constructions such as Merkle signatures. section 14.2.3
