[GFSD Issue] sharand: SHA-1 code is doesn't allow modification

Summary: Source package sharand contains non-free SHA-1 implementation

Versions Used:

• Operating System: Trisquel 5.5
• Package: sharand (0.0.20040607-1)

Steps to reproduce:

• Download the source code for package: Here
• Unpack/untar the source code and navigate to: /sharand-0.0.20040607/sha1.c
• File states:

      This document and translations of it may be copied and furnished to
      others, and derivative works that comment on or otherwise explain it
      or assist in its implementation may be prepared, copied, published
      and distributed, in whole or in part, without restriction of any
      kind, provided that the above copyright notice and this paragraph are
      included on all such copies and derivative works.  However, this
      document itself may not be modified in any way, such as by removing
      the copyright notice or references to the Internet Society or other
      Internet organizations, except as needed for the purpose of
      developing Internet standards in which case the procedures for
      copyrights defined in the Internet Standards process must be
      followed, or as required to translate it into languages other than
      English.

• package was removed upstream by debian.
• package was moved to multiverse (non-free repo) in Ubuntu "quantal" and is not in Ubuntu "precise"
• Should not appear in Trisquel 6.0 because of removal upstream.

References:

• List of software that does not respect the Free System Distribution Guidelines: sharand
• Debian GNU/Linux - Bugs: bug #659645, sharand: SHA-1 code is doesn't allow modification
• Debian GNU/Linux - Bugs: bug #662022, RM: sharand -- RoQA; non-distributable, low popcon, alternatives exist