RIPEMD with Two-Round Compress Function is Not CollisionFree (1997)

by H Dobbertin
Venue:Journal of Cryptology