RIPEMD with Two-Round Compress Function is Not Collision-Free
H. Dobbertin
Volume 10, Number 1, 1997, Pages 51--70
Cryptanalysis of MD4
H. Dobbertin
Volume 11, Number 4, 1998, Pages 253-271