Fix bug in sha256 verify