use md5 instead of sha256; #178