Jakob Jonsson On the Security of CTR + CBC-MAC. 76-93 2002 conf/sacrypt/2002 Selected Areas in Cryptography http://link.springer.de/link/service/series/0558/bibs/2595/25950076.htm db/conf/sacrypt/sacrypt2002.html#Jonsson02