Getting an external library for SHA1 is a mess, so just use our own, regrettably. Public domain implementation.