The conventional wisdom says that hash outputs can't be controlled; the conventional wisdom is simply wrong.

cr.yp.to blog