HMAC-based Key Derivation Function
HKDF is an extract-then-expand key derivation function built on HMAC. It first concentrates the entropy of an input secret into a fixed-size key, then expands it into as many independent keys as a protocol needs. TLS 1.3, Signal, and many other modern protocols use it to turn one shared secret into a full set of session keys.