While other comments about security may be right, it probably isn't a reason not to pursue this. It's a great idea and very worthwhile pursuing.

My main concern is over using hashes as an address. A hash isn't a unique address but I haven't seen any mention of protections being built in to protect against the risks of downloading different files with the same hashes.