Truncate auxsecret to the negotiated hash length