couldnt you apply encryption before hashing? so to mount a collision attack you'd also need to know the encryption key used by the underlying storatge system (fossil, vac).
so you dont just keep the the network address of your venti server but also the encryption key. just make it part of the dial string or something... -- cinap
