I'd give it that matching hashes is probably the least worse way of going about this
Except for that pesky detail of hash collisions