module-ified KDF, works properly

now to enable encrypt/decrypt, and remove debug noise