Key-Recovery Attacks on Universal Hash Function Based MAC Algorithms.

Helena Handschuh Bart Preneel Key-Recovery Attacks on Universal Hash Function Based MAC Algorithms. 144-161 2008 CRYPTO http://dx.doi.org/10.1007/978-3-540-85174-5_9 conf/crypto/2008 db/conf/crypto/crypto2008.html#HandschuhP08