Merkle–Damgård revisited: How to construct a hash function (2005)

by Jean-Sébastien Coron, Yevgeniy Dodis, Cécile Malinaud, Prashant Puniya