use cmp instead of sha1sums