I would say it is somewhat of a misuse of the standard. That a cryptographic hash makes an ok password function is somewhat accidental. If they had required P

I would say it is somewhat of a misuse of the standard. That a cryptographic hash makes an ok password function is somewhat accidental. If they had required PBKDF2 that would have made more sense. That at least confirms you used the pseudorandom function correctly.