#tls-1-3

One Secret Is Not One Key: The Discipline of Key Derivation with HKDF

Jul 11, 2026

A raw DH or ML-KEM shared secret is key material, not a key. How HKDF extract-then-expand, key separation, and the TLS 1.3 key schedule get it right.