anchor.diff:    src = fetchurl {
       urls = tarballUrls version;
       hashOutput = false;
  -    sha256 = "eeadc7e1e1bcef09680fb4837d448fbdf57224978f865ac1c16745868fbd0533";
  +    sha256 = "0cc3dae33e642cc187b5ceb467e0ad0e1b51dcba577de1190e9ffa17766ac2b1";
     };
   
     doCheck = true;
  
positive.code:     "mirror://gentoo/distfiles/libsodium-${version}.tar.gz"
    ];
  
    version = "1.0.16";
  in
  stdenv.mkDerivation rec {
    name = "libsodium-${version}";
  
negative.code:   passthru = {
      srcVerification = fetchurl rec {
        failEarly = true;
        urls = tarballUrls "1.0.17";
        fullOpts = {
          minisignUrls = map (n: "${n}.minisig") urls;
          minisignPub = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
        };
        sha256 = "0cc3dae33e642cc187b5ceb467e0ad0e1b51dcba577de1190e9ffa17766ac2b1";
      };
    };
  
  