Identity escrow -- Generalized birthday attacks on unbalanced Feistel networks --