OAEP encryption using SHA1?

[core433]

I've posted this issue on the public-encrypt repo as well:

browserify/publicEncrypt#13

Public Encrypt is using sha1 for the hash function, is that secure? It sounds like sha1 is being deprecated because it's been theoretically crackable since 2005. Is this the same hash function that node crypto is using / are they not on sha2 / sha256?

[dominictarr]

yes probably but the goal here is to be fully compatible with the node crypto api, so we'll remove this when they do.