always fit, regardless // of the integer size. func divRoundUp(x, y int) int { return int((int64(x) + int64(y) - 1) / int64(y)) } func Key[Hash fips140.Hash](h func() Hash, password string, salt []byte, iter, keyLength int) ([]byte, error) { setServiceIndicator(salt, keyLength) if keyLength <= 0 { return nil, errors.New("pkbdf2: keyLength must be larger than 0") } prf := hmac.New(h, []byte(password)) hmac.MarkAsUsedInKDF(prf) hashLen := prf.Size() numBlocks := divRoundUp(keyLength, hashLen) const maxBlocks...