A new Design Criteria for Hash-Functions
The Security of Cipher Block Chaining