Post-handshake Authentication Fix KeyUpdate to derive keys properly Fix supported curves (not checking ctx extensions)