1. A computer-implemented method comprising: walking an expander graph according to input to a hash function, the expander graph being walked using respective subsets of an input message; determining a label of a last vertex walked; and outputting the label as a result of the hash function.