On the impossibility of highly-efficient blockcipher-based hash functions (2005)

by J. Black, M. Cochran, T. Shrimpton
Venue: ADVANCES IN CRYPTOLOGY – EUROCRYPT ’05, LNCS 3494