Marc Fischlin Security of NMACand HMACBased on Non-malleability. 138-154 2008 CT-RSA http://dx.doi.org/10.1007/978-3-540-79263-5_9 conf/ctrsa/2008 db/conf/ctrsa/ctrsa2008.html#Fischlin08