anchor.diff:    src = fetchurl {
       urls = tarballUrls version;
       hashOutput = false;
  -    sha256 = "34d70cd65b9c95f3f2f90a9f5c1e0b6a0fe039a8d685e2d66d69c33d1cbf62fb";
  +    sha256 = "bfb62c7412ceb3b9422c6c7134a34ff01a560f98eb981c2d96829c1517c08197";
     };
   
     nativeBuildInputs = [
  
positive.code:   passthru = {
      srcVerification = fetchurl rec {
        failEarly = true;
        urls = tarballUrls "2.2.1";
        pgpsigUrl = map (n: "${n}.sig") urls;
        pgpKeyFingerprints = [
          "D869 2123 C406 5DEA 5E0F  3AB5 249B 39D2 4F25 E3B6"
  
negative.code:     "mirror://gnupg/gnupg/gnupg-${version}.tar.bz2"
    ];
  
    version = "2.2.2";
  in
  stdenv.mkDerivation rec {
    name = "gnupg-${version}";
  