drop md5, add blacklist feature