John Black Phillip Rogaway Thomas Shrimpton Encryption-Scheme Security in the Presence of Key-Dependent Messages. 62-75 2002 conf/sacrypt/2002 Selected Areas in Cryptography http://link.springer.de/link/service/series/0558/bibs/2595/25950062.htm db/conf/sacrypt/sacrypt2002.html#BlackRS02