`wish to hash` isn't completely correct, right? It's really "hash and authenticate" or something.