Use keyed blake2b to generate hashed keys
We're currently using the classic bad "secret prefix" MAC construction to generate our hashed keys.
Fortunately blake2b offers a keyed version of the hash. We should just switch to that.
We're currently using the classic bad "secret prefix" MAC construction to generate our hashed keys.
Fortunately blake2b offers a keyed version of the hash. We should just switch to that.