Hah, length-extension and CBC mode, famous NIST backdoors.