forget @TODO tests tests fuzz encoding (other than base64?) Links https://support.1password.com/pbkdf2/ https://1passwordstatic.com/files/security/1password-white-paper.pdf