doc hash-function-transition: pick SHA-256 as NewHash