The Exact PRF Security of Truncation: Tight Bounds for Keyed Sponges and Truncated CBC.

Peter Gazi, Krzysztof Pietrzak, Stefano Tessaro

Browse the full CRYPTO paper archive.