If you wish to double-check:

    git show --word-diff --word-diff-regex=. $THIS_COMMIT

Now it's explicitly advertized as SHA256.