tls-hkdf: Implement binder PSK generation