A "better" way would be with an hmac sha256.