Use sha256new by default, rather than sha256