[Scaevolus]

Use of SHA-1 for digital signature generation has been deprecated by NIST since 2011. It's disallowed after 2013-- which is important for software aiming for government use.

http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-13...