HashSmash early result: collision attack on reduced 39-round SHA-256 — Outposts