It is common, for performance reasons, to generate a digital signature by applying a public key transformation determined by the private key of the sender to the hash value of a message, rather than the message itself. Why is it important that it be difficult to find any two messages with the same hash value? Describe an attack that works and gives a true benefit to the attacker if this condition is not met.