Do I understand this right: if the length of the original file is specified along with the hash, then such attacks are not trivial?