On Hashing with Tweakable Ciphers