Short-output universal hash functions and their use in fast and secure data authentication by Nguyen, L, Roscoe, A

“…Message authentication codes usually require the underlining universal hash functions to have a long output so that the probability of successfully forging messages is low enough for cryptographic purposes. …”

On the construction of digest functions for manual authentication protocols by Nguyen, L, Roscoe, A

“…These together with other characteristics represent a new kind of game played between an attacker and honest parties, which is very different from other authentication mechanisms, notably message authentication codes or MACs. Short digests can be constructed directly or by \"condensing\" longer functions. …”