Add hkdf as a dependency.
Switch to just using byte slices for keys.
Prompt for passphrases.

(Also, read the boogers via stdin.)