You're absolutely right, and honestly I have no idea why I used SHA256, I should know better. Will fix.