Black, J.; Halevi, S.; Krawczyk, H.; Krovetz, T. (1999). UMAC: Fast and Secure Message Authentication(PDF). Advances in Cryptology (CRYPTO '99). Archived from the original(PDF) on 2012-03-10., Equation 1 and also section 4.2 "Definition of NH".
web.archive.org
Black, J.; Halevi, S.; Krawczyk, H.; Krovetz, T. (1999). UMAC: Fast and Secure Message Authentication(PDF). Advances in Cryptology (CRYPTO '99). Archived from the original(PDF) on 2012-03-10., Equation 1 and also section 4.2 "Definition of NH".