defaults: bump checksums to stronger form

md5 & sha1 are not considered secure anymore and thus are of questionable value here if checksums are wanted.

Gbp-Dch: Short