changed key derivation function, using scrypt (from tarsnap) now instead of my own derivation function