attached is a diff to support sha256 in the pkcs#1 rsa signing in factotum. if this seems okay, i'll commit it.