moved sha into client side