(GH-427) Add MD5 tool and license
(GH-427) Checksum downloaded files

This provides the actual checks to determine if a checksum matches the value
that is passed to it. This function does nothing if no checksum is included in
the package.