How to Construct Pseudorandom Permutations from Pseudorandom Functions
Luby, Michael, Rackoff, Charles · SIAM Journal on Computing · 1988