Change aes128_hash(password || salt) to aes128_hash(derived keys || salt)