The real problem is that both E:N-V-R.A and N-E:V-R.A are equally imprecise.
The concept of "reproducible builds/installs" requires much more complete
identifiers for serious work. But that was not the question asked in this thread.
So calculating both checksums, on rearranged plaintext items, for compatibility, kinda
misses the underlying need to verify system installs on hundreds of machines.