#3762: Use sha256 for clearsign operations