~2000 gates short when converting the SHA1 circuit to graph.