include a SHA1 hasher (uses default implementation on system) and configuration option for FIPS environments (fix #270)