Sequential delayed release of chained HMAC keys for use as asymmetric signature
That sounds like Tesla, which also uses a chain of MACs (where each key can be computed from values later in the chain), revealing the previous MAC key with each packet.  Going through the paper, I don't see how they authenticate the last value; my recollection was that they used a conventional signature scheme.