Attacking a toy version of SHA-1