HKDF vs PBKDF2: which key derivation function fits which input, what NIST SP 800-108 Rev. 2 changes, and how to migrate.
Former certification authority eMudhra has claimed a buggy Python script is the main reason it issued laughably insecure ...