John Kelsey Tadayoshi Kohno Herding Hash Functions and the Nostradamus Attack. 183-200 2006 conf/eurocrypt/2006 EUROCRYPT http://dx.doi.org/10.1007/11761679_12 db/conf/eurocrypt/eurocrypt2006.html#KelseyK06