Extract a pseudorandom key of fixed length Nh bytes from input keying material ikm and an optional byte string salt.