it isnt uncommon for projects to re-release a package upstream without changing the name leading to the problem of bad hashes -- some people have the old one but portage now tracks the new one ... it isnt easy to find these when you have thousands of files in distdir, so an option to eclean-dist would help where it verifies the manifests of all files and any that are bad, just delete the file
