Jooyoung Lee, Martijn Stam, John P. Steinberger: The Collision Security of Tandem-DM in the Ideal Cipher Model. CRYPTO 2011: 561-577