On the Impossibility of Highly-Efficient Blockcipher-Based Hash Functions (0)

by John Black, M Cochran, Thomas Shrimpton
Venue:Journal of Cryptology