use sha.js@2.1.4
2.1.9
update sha.js to 2.1.6
2.1.10