got C code and Go code to do the same. Must have used lengths of password and salt wrong earlier