Linear-XOR and Additive Checksums Don’t Protect Damgård-Merkle Hashes from Generic Attacks — latest news, discussion & facts — IJR