tls-hkdf: Implement resumption key generation