update: handle hash lengths with DSA keys larger than 1024 bits