add kdf for hmac and symmetric encryption