ByNobleID
    Adversary lower bounds for the collision and the set equality problems | NobleID