1. You publish two pairs (0, h(x0)), (1, h(x1)). It's your public key. 2. You publish h(x0) if you want to sign 0. 3. You publish x0 if you want to verify it.

1. You publish two pairs (0, h(x0)), (1, h(x1)). It's your public key. 2. You publish h(x0) if you want to sign 0. 3. You publish x0 if you want to verify it. Your public key is unusable after that.