md5 still has bugs