Key Derivation Functions (KDFs); TCP-AO's Traffic_Keys
are derived using KDFs. As per RFC5926, when invoked, a KDF generates
a string of length Output_Length bit based on the Master_Key and context
value. This result may then be used as a cryptographic key for any
algorithm that takes anOutput_Length length key. A KDF MAY specify
a maximum Output_Length parameter.