signatures: use ripemd128 instead of sha256half