diff --git a/mod_image_for_recovery.sh b/mod_image_for_recovery.sh
index 1e29c44..91766f1 100755
--- a/mod_image_for_recovery.sh
+++ b/mod_image_for_recovery.sh
@@ -135,7 +135,7 @@
   if [ $FLAGS_sync_keys -eq $FLAGS_TRUE ]; then
     dd if="$INSTALL_VBLOCK" of="$kern_tmp" conv=notrunc 1>&2
   fi
-  local kern_hash=$(sha1sum "$kern_tmp" | cut -f1 -d' ')
+  local kern_hash=$(sha256sum "$kern_tmp" | cut -f1 -d' ')
   rm "$kern_tmp"
   # Force all of the file writes to complete, in case it's necessary for
   # crbug.com/954188