hkdf_sha256
hkdf_sha256(key->ptr + SHA256_DIGEST_LENGTH, aes_info,
hkdf_sha256(key->ptr, hmac_info, secret) < 0 ||