update: support other hashing algorithms than SHA-1
update: sha1 is not mandatory anymore