Check archive MD5 and SHA1 before extracting files

Signed-off-by: Gianpaolo Macario <gmacario@gmail.com>