Not sure if this is a real issue, but cryptohash-sha256 is bound to an ancient version of ByteString. Are there any good reasons not to port it to something modern? If not, are there any difficulties in porting it to something modern?