How to Stretch Random Functions: The Security of Protected Counter Sums

D. J. Bernstein

Volume 12, Number 3, 1999, Pages 185-192