More precisely, collisions should be as unpredictable as hashes themselves, so the only way to find collisions is brute force.