our release process still documents that the hashes we include on the release page are sha1 and md5. Because especially md5 is not secure anymore we should use stronger ones -- openssl.org uses sha256 and sha1 for example
If we publish more hashes then there is lesser probability of conflict for all of them together :-)