On the Impossibility of Efficiently Combining Collision Resistant Hash Functions.

Dan Boneh, Xavier Boyen

Browse the full CRYPTO paper archive.