It's actually a "PRF" rather than a "hash" we care about isn't? I have heard rumours of PBKDF2-AES :-/