Make FIPS provider use KDF name for PBKDF2