This is a good point. OpenSSL and CC implement it as PBKDF2 HMAC, but it could hypothetically be more flexible. Current code does not handle this, so this is an issue.