Separating two roles of hashing in one−way message authentication - Nguyen, L; Roscoe, A (2008)