no known collisions exist for sha1, by contrast