Improved HKDF and TLS1-PRF documentation