Fix SHA-256-based KDF when using CCMP as the pairwise cipher