The results used from all of the SHA1 hashes is the lower case hex string. I'll be sure this is mentioned when I combine the zero-k auth and reg drafts into a JEP. Jer