clarify that it's SHA-2