C_DeriveKeys

[Michael StJohns <msj@nthpermutation.com>]

As a more generic mechanism - would it make sense to change (or add) 
C_DeriveKey to C_DeriveKeys as below?  This allows the output of one or 
more keys (ulKeyCount) as defined by the pTemplates.  The created key 
handles are placed in phKeys.   This has a nice side effect in that the 
various TLS KDF functions no longer require a special mechanism 
structure, and works well with functions that need to define a hierarchy 
of keys.


C_DeriveKeys

CK_DEFINE_FUNCTION(CK_RV, C_DeriveKeys) (
    CK_SESSION_HANDLE hSession,
    CK_MECHANISM_PTR pMechanism,
    CK_OBJECT_HANDLE hBaseKey,
    CK_ULONG ulKeyCount,
    CK_ATTRIBUTE_PTR[] pTemplates,
    CK_ULONG[] ulAttributeCounts,
    CK_OBJECT_HANDLE_PTR[] phKeys
);