HMAC-based extract-and-expand Key Derivation Function