Restoring an old Bitcoin wallet backup could require a 5,777-byte signature under the draft SHRINCS scheme. Its smaller signatures, from 548 bytes, need a reliable signing history that backups may lack. Analysis by @akibablade