Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digest_size. (CVE-2016-9243)