That is a good question. Especially given AES256 is more secure (advanced encryption standards) I think its probably a case that sha is still good enough to do the job