> There certainly are GPL compatible SHA-1 implementations available, in > GNU/Linux, or FreeS/WAN, for example. Yeah, then the question becomes how to compromise between bloating the binutils sources and inconveniencing the user :-P (that is, after the politics of choosing a suitable implementation)