Second Preimages on n-Bit Hash Functions for Much Less than 2n Work (2005)

by J Kelsey, B Schneier
Venue:Eurocrypt 2005. Volume 3494 of Lecture Notes in Computer Science