The user may have the data hashed as MD5 or SHA-1, so we should provide
both types for consumption.