Just made another change to the code: Previously, I would have let the PKCS#12 GOST MAC fail with the same error code that it would have failed if PBKDF2 derivation failed. This is nonsense and horrible for the user. Therefore, the new error code PKCS12_R_MISSING_PBKDF2 is introduced in crypto/pkcs12/p12_mutl.c for this case.