$I wouldn't put it past them to knowingly produce that hash…

$I wouldn't put it past them to knowingly produce that hash on an empty string as a potential backdoor.