[WIP] [security] adding a tip about supported algorithm for 'hash' function

related to #3158