I have added sha256sum support to busybox (only +3.3KB), so it will be available for the next release.
Meanwhile you can use the attached sha256sum from coreutils which I used to install Debian (just drop it in /usr/bin, eventually fix execute permissions)
Thanks