EVP_PBE_scrypt() handles salt=NULL as salt=""