A block-cipher mode of operation for parallelizable message authentication (0)

by J Black, P Rogaway
Venue:in Advances in Cryptology (EUROCRYPT