A block-cipher mode of operation for parallelizable message authentication (2002)

by J Black, P Rogaway
Venue:In Advances in Cryptology - Eurocrypt'02 Proceedings