Christian Gehrmann: Cryptanalysis of the Gemmell and Naor Multiround Authentication Protocol. CRYPTO 1994: 121-128