Question on veriexec

[Konrad Neuwirth <konrad%mailathome.or.at@localhost>]

As I've said elsewhere, we've taken up using Veriexec.  The current
incarnation can only do one hash per file, making the user chose one
hashing algorithm per file.  I've seen pkgsrc use multiple hashes for
distribution files to be guarded against hashing function vulnerabilities
-- would it not make sense to use a similar approach for veriexec as well? 
Would it be hard work to add?

Thank you, 
 Konrad Neuwirth