[enc] Use sha256 as hash function for PBKDF2.