crypto101/book — pull request #220 by nespera (2014-09-17 10:02:06+00:00)
Title: One-time mac polynomial equation

I don't think b (a random number) should be the same as the number of blocks in the message, which is how it appears in this equation.