Praveen Gauravaram, John Kelsey. Linear-XOR and Additive Checksums Don t Protect Damgård-Merkle Hashes from Generic Attacks. In Tal Malkin, editor, Topics in Cryptology - CT-RSA 2008, The Cryptographers Track at the RSA Conference 2008, San Francisco, CA, USA, April 8-11, 2008. Proceedings. Volume 4964 of Lecture Notes in Computer Science, pages 36-51, Springer, 2008. [doi]
Abstract is missing.