no sha1 collisions are known, contrast to md5

at the expense of 4 additional bytes in the digest column
Merge pull request #10 from buhman/hash-algorithm

replace md5 with sha1