How to key Merkle: Cascaded pseudorandomness and its concrete security (0)

by M Bellare, R Canetti, H Krawczyk