Bart Preneel Paul C. van Oorschot On the Security of Two MAC Algorithms. 19-32 http://link.springer.de/link/service/series/0558/bibs/1070/10700019.htm 1996 EUROCRYPT db/conf/eurocrypt/eurocrypt96.html#PreneelO96