Use truncated sha256 instead of broken md5 - cf. http://natmchugh.blogspot.fr/2014/10/how-i-created-two-images-with-same-md5.html