Higher-Order Differential Meet-in-the-middle Preimage Attacks on SHA-1 and BLAKE
higher-order differential meet-in-the-middle
scientific article