Java Crypto Basics: generating key

kdf.java

import org.bouncycastle.crypto.PBEParametersGenerator;
import org.bouncycastle.crypto.digests.SHA256Digest;
import org.bouncycastle.crypto.generators.PKCS5S2ParametersGenerator;
import org.bouncycastle.crypto.params.KeyParameter;

private final int CR_ITERATIONS = 128 * 1000;

public byte[] kdfPassword(String pwd, byte[] salt, int outLength) {
	PKCS5S2ParametersGenerator gen = new PKCS5S2ParametersGenerator(new SHA256Digest());
	gen.init(PBEParametersGenerator.PKCS5PasswordToUTF8Bytes(pwd.toCharArray()), salt, CR_ITERATIONS);
	byte[] key = ((KeyParameter)gen.generateDerivedParameters(outLength)).getKey();
	return key;
}