conform to debian GnuPG SHA requirements