crypt->derive(): Strengthened iteration count & random bytes