Mihir Bellare Ran Canetti Hugo Krawczyk Keying Hash Functions for Message Authentication. 1-15 http://dx.doi.org/10.1007/3-540-68697-5_1 1996 conf/crypto/1996 CRYPTO db/conf/crypto/crypto96.html#BellareCK96