static void verifyMD5(S md5) {
  if (md5.length() != 32) fail("bad length for md5: " + quote(md5));
  if (!Pattern.compile("[a-f0-9]+").matcher(md5).matches())
    fail("bad md5: " + quote(md5));
}