clear babble out of changelog
remove dependency on crypto-js, and add a 'require' for openpgp's hash function, which we know works