PGP collision attack on Linux creator highlights flaws with short IDs