Callback: fetch checksum from bag, don't recalculate
SWORD helpers: calculate sha512, not sha256