Fixed SHA256 verification (not tested yet)