A Second Preimage Attack on the XOR Hash Combiner

Figure 4

Construction of the multicollision-and-double-diamond structure.