Cryptanalysis of SHA-0 and Reduced SHA-1