On the Impossibility of Highly-Efficient Blockcipher-Based Hash Functions.

John Black, Martin Cochran, Thomas Shrimpton

Browse the full EuroCrypt paper archive.