N Dedic, D Harnik, L Reyzin - Cryptology ePrint Archive, 2007 - eprint.iacr.org
Can a one-way function f on n input bits be used with fewer than $ n $ bits while retaining
comparable hardness of inversion? We show that the answer to this fundamental question is …