using SHA-256 instead of SHA