Tls13KeySchedule.deriveSecret

private ubyte[] deriveSecret(const(ubyte)[] secret, string label, const(ubyte)[] transcriptHash)

Derives a secret using HKDF-Expand-Label per RFC 8446 §7.1.

Parameters

secretThe base secret.
labelThe label string (without "tls13 ").
transcriptHashThe hash of the handshake transcript.

Returns

The derived secret.