What about `sha1(uniqid(mt_rand(), true))` ?