more secure hashing?, removed Util.str