Thierry Baritaud Henri Gilbert Marc Girault FFT Hashing is not Collision-free. 35-44 http://link.springer.de/link/service/series/0558/bibs/0658/06580035.htm 1992 EUROCRYPT db/conf/eurocrypt/eurocrypt92.html#BaritaudGG92