fix changelog to link to hkdfexpand