Checksums

This introduces partiality. Couldn't the function take a `Cs.t` instead of a `t`, leaving the proof of its existence to the caller?