Preimage Attacks against PKC98-Hash and HAS-V