Mention that SHA2 is vulnerable to length extension attacks.