added SHA check for tarsnap