Checked SHA streams use a String instead of Digest

The reason is that the SHA package does not offer a way to construct a Digest
from a String.