The hash length check wasn't strict enough,