Moni Naor Omer Reingold On the Construction of Pseudorandom Permutations: Luby-Rackoff Revisited. 29-66 1999 12 J. Cryptology 1 http://link.springer.de/link/service/journals/00145/bibs/12n1p29.html db/journals/joc/joc12.html#NaorR99