Fix typo in KDF pseudocode

As originally written, the first 33 bytes (0 -> 32) of the output are fed back in to the HMAC function. This feels like a typo. If the hash used has am output length equal to 32 (as allowed on line 101), this operation will fail.