made secure hash use iteration if requested