gcrypt::kdf
pub fn s2k_derive( digest: DigestAlgorithm, iter: u32, secret: &[u8], salt: Option<&[u8]>, key: &mut [u8]) -> Result<()>