switch JS to SHA2