Base doesn't use sha2 directly
Rename hexdigest to return a binary digest
Use digest helper to compute dep digest
Just a generic files digest
Use generic digest helper
Use base64 for expanded keys