Chosen-Prefix Collisions on AES-Like Hashing
eprint.iacr.org