Constructing an Ideal Hash Function from Weak Ideal Compression Functions
merkle - damgard revisited : how to construct a hash function .