The security of cipher block chaining, Lecture (0)

by M Bellare, J Kilian, P Rogaway