* implement sha256/sha1/md5 checking with proper backward compatibility