Just as an exercise (+ lazyness, + lack of memory) I created this service (Automator workflow) to generate SHA checksums right from the Finder.
Jut get it...
curl -O https://dl.dropboxusercontent.com/u/2331589/checksumallthethings.tar.gz
Check it...
echo "51dc69ef7561108ebd506f6b34c03c18ca08bba3efe6bdb06c2ce043585a6f78 *checksumallthethings.tar.gz" | shasum -c -a 256
And if everything looks fine...
tar xfz checksumallthethings.tar.gz -C ~/Library/Services/; rm checksumallthethings.tar.gz
Then you'll find the new option in the contextual menu under Services
> SHA checksum
while selecting files or folders* in Finder.
* please note that folders will not checksum, but I haven't found a way to filter them without using the too specific 'documents' filter.
While doing this I noticed an interesting thing. If you share files from your Public
folder as you download them, checksum does not mutate. Alternatively, if you share your file from other folders, every time you download the app... the checksum changes, making impossible to check your download autenticity based on checksums.