package hashes