[tptacek]

I'm sorry, but because you brought it up: what's the attack on a system that derives a single key for AES and HMAC?