"On the Impossibility of Highly-Efficient Blockcipher-Based Hash Functions."

John Black, Martin Cochran, Thomas Shrimpton (2009)
a service of Schloss Dagstuhl - Leibniz Center for Informatics