more security: need only some bits for collisions, not all