anchor.diff:    passthru = {
       srcVerified = fetchurl rec {
         failEarly = true;
  -      urls = tarballUrls "1.3.3";
  +      urls = tarballUrls "1.3.4";
         pgpsigUrls = map (n: "${n}.sig") urls;
         inherit (gnupg.srcVerified) pgpKeyFingerprints;
  -      outputHash = "0c7f5ffe34d0414f6951d9880a46fcc2985c487f7c36369b9f11ad41131c7786";
  +      outputHash = "f6c2883cebec5608692d8730843d87f237c0964d923bbe7aa89c05f20558ad4f";
         inherit (src) outputHashAlgo;
       };
     };
  
positive.code:     "mirror://gnupg/libksba/libksba-${version}.tar.bz2"
    ];
  
    version = "1.3.3";
  in
  stdenv.mkDerivation rec {
    name = "libksba-${version}";
  
negative.code:   src = fetchurl {
      urls = tarballUrls version;
      allowHashOutput = false;
      sha256 = "f6c2883cebec5608692d8730843d87f237c0964d923bbe7aa89c05f20558ad4f";
    };
  
    buildInputs = [
  