why aren't we just using an md5 like in pouch ?