Oorshot, "On the security of two MAC algorithms (1996)

by Bart Preneel, Paul C van
Venue:Advances in Cryptology -- Eurocrypt ’96, Lecture Notes in Computer Science 1070