Time-Space Tradeoffs for Sponge Hashing: Attacks and Limitations for Short Collisions