We don't need sha1 - a "bad" cryptographic-level hash is either overkill for a "smoke check for corruption" hash, but not enough for security.

And we don't need complex uuid generation either - the only place they seem to be used is to generate "unique" file names, but again is massive overkill and less user-friendly than something like incrementing suffixes.

Part of removing boost: #674