On the performance, feasibility, and use of forward-secure signatures