Return to Issue Details A new proof for the security of the keyed Sponge construction in the ideal compression function model Download Download PDF