As of vLLM version 0.11, Automatic Prefix Caching uses SHA-256 by default to reduce collision and information leakage risks, but this cannot replace tenant isolation.