switch to Digest::SHA and s/hash/digest/