FFT Hashing is not Collision-Free (1993)

by T Baritaud, H Gilbert, M Girault
Venue:Advances in Cryptology-EUROCRYPT '92 Proceedings