Second Preimages on n-Bit Hash Functions for Much Less than 2ⁿ Work

Second Preimages on n-Bit Hash Functions for Much Less than 2ⁿ Work