crypto/cms/cms_pwri.c: Use SHA256 as the HMAC for PBKDF2