Blockcipher-based MACs: beyond the birthday bound without message length
scientific article; zbMATH DE number 6842661