[j16sdiz]

This is an anti-collusion measure against birthday attack. The effect is exponential.

[Ajedi32]

2^x is exponential. GP is correct, it's still only one bit, so the cost is halved.