@DmitryOlshansky: It may not be encryption, but SHA is still all about security (passwords, detecting data tampering, etc). As such, any internals not *guaranteed* to stay unexposed are a potential weak point unless proven otherwise.