> A difference is that most common mixers are not collision-free.
That is not true, most modern hash implementations use invertible mixers. See Bob Jenkins' notes on hash function design:
That is not true, most modern hash implementations use invertible mixers. See Bob Jenkins' notes on hash function design:
The genesis of this was database internals, which have many use cases for strongly randomized bijective function for integral types. It is used in places where most people would use an ordinary hash function.
This particular hash is not trivially invertible, since internal AES state necessary to reverse it is discarded.