checksum needs length