I think that only happens when you use an old browser without native sha256 support (so it fallback to pure js implementation of sha256).