sha1 -> pbkdf2