[PaulHoule]

There is HMAC but also you can defend against those attacks by throwing away some of the bits. For instance do SHA-512 and keep just the first 256 bits.