Reject hexstring longer than 40-bytes in get_short_sha1()