In the past, build scripts could save multiple SHA hashes without issues. However, with the advent of USB tokens and signtool, it seems like signing EXEs with multiple SHA hashes is not supported. This article discusses the recommended hashing algorithms for EXE signing today, and whether SHA-1, SHA-256, or SHA-384 is the best option.
Read More