Hello, I'm working on a little project to perform cryptographically-sound timestamping on Wikipedia snapshots. I'm using the opentimestamps.org service, which by default uses the SHA-256 hash. In order to get the SHA-256 for the timestamp, I need to download each file and compute the hash.

Currently the xml data dumps provide only the MD5 and SHA-1 hashes. Both of these hash functions are obsolete because they are cryptographically broken. I'm wondering: would the maintainers of this service be willing to add SHA-256 digests to the dumpstatus and checksum files going forward? SHA-256 is still cryptographically sound and would allow me to verify that I have the correct hash for timestamping.

Thanks in advance!

Best regards,

Arthur