On fast and provably secure message authentication based on universal hashing (1996)

by V Shoup
Venue:Advances in Cryptology–Crypto’96, 1109