After installing the service mesh the secret in control namespace is is stored using sha1

[quicklab@upi-0 ~]$ oc get secrets
NAME TYPE DATA AGE

htpasswd Opaque 2 52d

[quicklab@upi-0 ~]$ oc get secret -n istio-system htpasswd -o json | jq .data.auth | tr -d \" | base64 -d | sed 's/}.*/}REDACTED\n/'
internal:

REDACTED

The SHA indicates SHA-1. In modern best practices, SHA-1 is deprecated and shouldn't be used. We have a request from customer for upgrading SHA-1