wait until you hear about collisions (missing more bits than your hash output length guarantees a collision on average)