use a better hack for gcry_kdf_derive() empty password problem