I have been looking into how Bitlocker performs key derivation[1][2] and apparently Bitlocker's PBKDF stretches by performing 1048576 iterations of SHA-256 instead of HMAC-SHA-256 as it's usually done in PBKDF2. Doesn't that make Bitlocker extremely weak given it's stretching SHA-256 instead of H...