sha256 is default, for now