nettle pbkdf2 (using rkt); nettle digests are reusable
libcrypto digest ctxs are reusable
updated todo
gcrypt: add scrypt kdf