On Time-Space Tradeoffs for Bounded-Length Collisions in Merkle-Damgrd Hashing.

Ashrujit Ghoshal, Ilan Komargodski

Browse the full CRYPTO paper archive.