Use built-in Package.sha instead of CryptoJS