but if there isn't a strong reason for using md5 over sha1, I suppose it could be acceptable to replace it with the boost implementation