Add sha256 hash function wrappers.  This allows us to verify a package file in the index was not tampered with and downloaded correctly.