Preimages on n-Bit Hash Functions for Much Less than 2 n Work”, EUROCRYPT (2005)

by John Kelsey, Bruce Schneier, “Second