CI_Encryption::hkdf() to follow RFC5869 more strictly