We need to generate and store the expected hashes of the downloaded pastries to be able to validate stored packages.