Apparent bug in SHA-1 digests