Merkle-Damgrd Revisited: How to Construct a Hash Function.

Jean-Sbastien Coron, Yevgeniy Dodis, Ccile Malinaud, Prashant Puniya

Browse the full CRYPTO paper archive.