Constructing an Ideal Hash Function from Weak Ideal Compression Functions
Black-Box Analysis of the Block-Cipher-Based Hash-Function Constructions from PGV