quantum-proof OTP