update README regarding sha256