Would the sha and md5 sums be comments in the release notes?