side note: ECDSA is in danger first, not SHA256...