(ITS#8839) never use md5 and/or sha1, use sha512, file signing