I don't know why this happened, and I cannot reproduce it; but in the course of installing dependencies for some project I got

Invalid hash for <repo>/package/string-conversions-0.4.tar.gz 

halfway the installation. The error did not reappear when re-running cabal install --only-dependencies .