use SHA1 hashes instead of MD5 hashes