Fix #15: use sha1 hashes for double signing

_Correct PR after tests_