should we test it doesn't contain inappropriate chars here? e.g. test with a regexp [0-9A-F] ?