gstreamer-plugins-base should be ported to use NSS library for cryptography.
See the tracking bug for details and links on how it could be done.
Which specific parts of gstreamer-plugins-base did you have in mind?
gst-libs/gst/cdda contains SHA-1 code, but this bug can be probably
closed-wontfix as using SHA-1 in cdda is not security relevant.
I filed http://bugzilla.gnome.org/show_bug.cgi?id=53631 about removing the
sha1.[ch] copy, and using glib's version instead.