A Note on Provably Secure Double-Block-Length Hash Functions in a Black-Box Model