merkle - damgard revisited : how to construct a hash function .
The Security of Cipher Block Chaining