Damgård, I. B.; Knudsen, L. R. The Breaking of the AR Hash Function. DPB 1993, 22.