fix redundant key derivation with common crypto provider