@conference{822906,
  author = {Praveen Gauravaram and John Kelsey},
  title = {Linear-XOR and Additive Checksums Don t Protect Damgaard-Merkle Hashes from Generic Attacks},
  year = {2008},
  number = {4964},
  month = {2008-04-17 00:04:00},
  publisher = {Topics in Cryptology – CT-RSA 2008 (Lecture Notes in Computer Science), San Francisco, CA, US},
  url = {https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=51344},
  doi = {https://doi.org/10.1007/978-3-540-79263-5_3},
  language = {en},
}