pbkdf2-hmac-sha256 bugfix for buffer overrun, see #711.