replace sha256sum/xxd with openssl