use pbkdf2 again instead of multiple KDFs