Phase out all checksums weaker than sha256 (if possible)

Phase out all checksums weaker than sha256 (if possible) #4081