Keying Hash Functions for Message Authentication (1996)

by Mihir Bellare, Ran Canetti, Hugo Krawczyk