Out of all possible options at the time, why did he go for sha256 given its ties to NIST/NSA?