valid_hash
int valid_hash(unsigned char *, size_t, const char *, size_t);
if (!valid_hash(f, flen, mft->crlhash, sizeof(mft->crlhash)))