Second Preimages on n-Bit Hash Functions for Much Less than 2ⁿ Work — scholarly article