Time-space tradeoffs for sponge hashing: attacks and limitations for short collisions
scientific article; zbMATH DE number 7705192