John P. Steinberger The Collision Intractability of MDC-2 in the Ideal-Cipher Model. 34-51 2007 conf/eurocrypt/2007 EUROCRYPT http://dx.doi.org/10.1007/978-3-540-72540-4_3 db/conf/eurocrypt/eurocrypt2007.html#Steinberger07