fn derive( passphrase: &str, salt: &[u8], memory_kib: u32, passes: u32, ) -> Result<[u8; 32], String>