sha1 no longer accepted for secure boot
---------------------------------------

FIT images using sha1 are no longer accepted as secure boot images. sha1 has
been proven insecure in 2017.