Florent Chabaud Antoine Joux Differential Collisions in SHA-0. 56-71 http://dx.doi.org/10.1007/BFb0055720 1998 conf/crypto/1998 CRYPTO db/conf/crypto/crypto98.html#ChabaudJ98