You only need the short SHA, which is 4 characters. Brute force ends up becoming very easy with 65k possibilities.