updated third party licenses for SHA1 and SHA2