Personally, I suggest Digest::SHA rather than SHA1. SHA-1 will be superceded by 2010 at the latest, so you may want to be ready to implement SHA-256 or better with Digest::SHA. You may also want to look at the test data available at http://www.nsrl.nist.gov/testdata/