(cherry picked from commit 8abd399a531a6beb864519fb0ae35d9c193cff03; amended to use VERIFY instead of ASSERT in HKDF.h)