Johan Håstad The Security of the IAPM and IACBC Modes. 153-163 2007 20 J. Cryptology 2 http://dx.doi.org/10.1007/s00145-006-0225-z db/journals/joc/joc20.html#Hastad07