Major Description
As discussed on the dev list [recently| ] it is wise to stop relying on md5 and sha1 sums as they are inherently insecure. apurtell has suggested to use Hbase approach on this by essentially doing
for i in *.tar.gz; do echo $i; gpg --print-mds $i > $i.mds ; done