Re: [cryptography] workaround for length extension attacks (was: Doubts over necessity of SHA-3 cryptography standard)