Fix overrun in prf() if hmac size not divisible into key size