Not sure if it works on 1.1, but wouldn't this be a bit better?

sha256.New().Sum(passphrase)

Same below.