John Black Martin Cochran Thomas Shrimpton On the Impossibility of Highly-Efficient Blockcipher-Based Hash Functions. 526-541 2005 conf/eurocrypt/2005 EUROCRYPT http://dx.doi.org/10.1007/11426639_31 db/conf/eurocrypt/eurocrypt2005.html#BlackCS05