Hi! I think that I created some novel and cool key derivation function. But I was drunk at the time, and all my friends say that it is not as good as I think...

So, I used it to encrypt a file with the flag. Can you prove that was a wrong thing to do?

Files: derive.zip