avoid: WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.
which is caused by :
If no options are given, they will default to: -c aes -h sha1 -d /dev/urandom
If no makefs is given then mkswap will be assumed
swap=crypt-swap source='/dev/sda2'
at least in version 1.7.4