Seems SHA1 is "recommended to be discontinued in 2010", since it is expected that the MD5 collision theories/algorithms can be partially re-used.

Investigoating options at the moment (SHA256 may be a contender).

//Ingvar