You are right, but it seems the M set alone can be used as both hashing and ECC at once.

Regards