Replace SHA-1 library with one that is clearly licensed.