Machine-Checked Security for XMSS as in RFC 8391 and SPHINCS +