Alex Biryukov Andrey Bogdanov Dmitry Khovratovich Timo Kasper Collision Attacks on AES-Based MAC: Alpha-MAC. 166-180 2007 conf/ches/2007 CHES http://dx.doi.org/10.1007/978-3-540-74735-2_12 db/conf/ches/ches2007.html#BiryukovBKK07