DRY shared hkdf_extract_expand code to new module