[heinrich5991]

I believe this is only an issue if you can produce collisions for the underlying hash function. SHA256 is still considered safe against that.