Keying hash functions for message authentication (1996)

by Mihir Bellare, Ran Canetti, Hugo Krawczyk