Short−output universal hash functions and their use in fast and secure message authentication

L.H. Nguyen and A.W. Roscoe