pub fn hkdf_sha1(key: &[u8], salt: &[u8], subkey: &mut [u8])
Produces a subkey that is cryptographically strong even if the input secret key is weak.