Update RFC 2898 KEY DERIVATION