pub fn hkdf(salt: &[u8], label: &[u8], ikm: &[u8]) -> [u8; 32]
HKDF[salt, label](key, 32)
HKDF from RFC 5869 with SHA-256.