doc: add note about key derivation

adds a note to the crypto docs passing along
the advice that openssl gives about what
key derivation function they recommend.

#8578
I would not go into emotional spectre here :) Use just `weak`, or even better tell people that it derives key + iv pair using just the input key string.

Also, I'd go into a bit of more detail and tell people what this derivation method actually does.