hash the api-post buffer key