On the impossibility of highlyefficient blockcipher-based hash functions (2005)

by J Black, M Cochran, T Shrimpton
Venue:Advances in Cryptology, volume 3494 of Lecture Notes in Computer Science