Constructing an Ideal Hash Function from Weak Ideal Compression Functions
A Failure-Friendly Design Principle for Hash Functions