add checksum spec

closes #19