The latest Flexpay version is now 3.5

The Flexpay signature calculations now use SHA256 instead of SHA1 in startorder and postbacks

See details in updated documentation 

+1