fn derive_cek(
hkdf_settings: &HkdfSettings,
secret: &[u8],
alg: Algorithm,
) -> Result<[u8; 32], SecretProtectedKeyEnvelopeError>fn derive_cek(
hkdf_settings: &HkdfSettings,
secret: &[u8],
alg: Algorithm,
) -> Result<[u8; 32], SecretProtectedKeyEnvelopeError>