Hans Dobbertin. The First Two Rounds of MD4 are Not One-Way. In Serge Vaudenay, editor, Fast Software Encryption, 5th International Workshop, FSE 98, Paris, France, March 23-25, 1998, Proceedings. Volume 1372 of Lecture Notes in Computer Science, pages 284-292, Springer, 1998. [doi]