Pseudorandom Functions and Permutations Provably Secure against Related-Key Attacks.

Mihir Bellare, David Cash

Browse the full CRYPTO paper archive.