Lars R. Knudsen Xuejia Lai Bart Preneel Attacks on Fast Double Block Length Hash Functions. 59-72 1998 11 J. Cryptology 1 http://link.springer.de/link/service/journals/00145/bibs/11n1p59.html db/journals/joc/joc11.html#KnudsenLP98