Lars R. Knudsen Chris J. Mitchell Partial Key Recovery Attack Against RMAC. 375-389 2005 18 J. Cryptology 4 http://dx.doi.org/10.1007/s00145-004-0324-7 db/journals/joc/joc18.html#KnudsenM05