Swap PBKDF2/AES/GCM for scrypt/chacha20/poly1305.