sha1 and sha512 were not quite right.  Rewrote pbkdf2-hmac-sha256.  The inline code was a nightmare.  Now all of these should be BE safe