https://github.com/oasis-tcs/csaf/blob/master/csaf_2.1/prose/share/csaf-v2.1-draft.md#629-use-of-sha-1-as-the-only-hash-algorithm-
https://github.com/oasis-tcs/csaf/blob/master/csaf_2.1/prose/share/csaf-v2.1-draft.md#629-use-of-sha-1-as-the-only-hash-algorithm-