Password-based key generation

Adding PBE keys as an option.
You might specify that the salt must be Base64-encoded.