A block-cipher mode of operation for parallelizable message authentication (2002)

by J Black, P Rogaway
Venue:EUROCRYPT 2002, LNCS 2332