-implement a PKCS5 derived PIN instead of using the PIN directly