PVK_SALTLEN
outlen += PVK_SALTLEN;
write_ledword(&p, enclevel ? PVK_SALTLEN : 0);
if (RAND_bytes_ex(libctx, p, PVK_SALTLEN, 0) <= 0)
p += PVK_SALTLEN;
if (!derive_pvk_key(keybuf, sizeof(keybuf), salt, PVK_SALTLEN,
p = salt + PVK_SALTLEN + 8;