A block-cipher mode of operation for parallelizable message authentication (0)

by John Black, Phillip Rogaway
Venue:In Proc. EUROCRYPT