slow == 172.959 times slower than sha1("password")