Are you thinking derive hides salt generation or returns something that contains the derived key and the salt?