use PBKDF2 instead of pure HMAC-SHA512 rounds