SHA2

Browser Fingerprints

 * Chromium 10.0 shows sha1/sha256
 * Opera 11.0 shows sha1/sha256
 * IE8 shows sha1
 * Firefox 3.5/4.0beta shows md5/sha1 https://bugzilla.mozilla.org/622332
 * konqueror 4.5 shows md5/sha1 https://bugs.kde.org/261789
 * openssl defaults to sha1, use param -sha256

Cryptsetup
Add -h SHA256 to luksFormat (and add -c twofish-xts-plain64 to get most secure cipher/chaining).