upstream rust changes; added dep on rustcrypto for SHA1, which got removed from core