Factor out common concatKDF logic
Replace algorithm/encryption string literals with constants