2013.05.28 14:03:32 (339351229006221314) from Daniel J. Bernstein:
Live quote from actual #eurocrypt2013 slide: "Idea: Use algebraic hash function"; specifically, replace "SHA-2(a,b)" with "y=L*a+R*b mod q".