Mention use of SHA-1 in README

Thanks for the great library!

I added a little CYA about the current use of SHA-1 to the README, which will hopefully encourage a fix. Hopefully anybody using this for "industrial-grade" encryption would read the source first, but it's worth being upfront, I think.