Cryptographic hash-function basics: Definitions, implications, and separations for preimage resistance, secondpreimage resistance, and collision resistance (2004)

by P Rogaway, T Shrimpton
Venue:Fast Software Encryption (FSE), volume 3017 of Lecture Notes in Computer Science