Add a hash package.

This is for juju backups.
Consequently, I'll drop sha1.go. :)