As discussed in birthday attack, one can expect a collision after 1.25√H numbers, if choosing from H possible outputs.
如在生日攻击中论述的那样，如果从H的可能输出中选择，在1.25√H次后预期就会发生一次碰撞。