Time-space tradeoffs and short collisions in Merkle-Damgård hash functions
scientific article; zbMATH DE number 7614538