computeVerhash: use proper SHA256, output is hex

still needs proper concatenation