sha1 is fine