SHA restrictions