Comment by FaceKicker

I doubt they would use an exact hash like SHA-1 though. It wouldn't allow for variations in bitrate, slight length differences due to cutting off beginning/end of the song's fade out/fade in, etc.

I could imagine people figuring out the minimal bitrate that would produce a matching fingerprint (perhaps 64 kbps or even smaller) and sharing music that way.