Dan Boneh Glenn Durfee Matthew K. Franklin Lower Bounds for Multicast Message Authentication. 437-452 2001 conf/eurocrypt/2001 EUROCRYPT http://dx.doi.org/10.1007/3-540-44987-6_27 db/conf/eurocrypt/eurocrypt2001.html#BonehDF01