CVE-2021-43666: Improper Handling of Length Parameter Inconsistency

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...