hmac_kdf is supported in the example, but the AWS CloudHSM does not support HMAC KDF.

From this link (https://docs.aws.amazon.com/cloudhsm/latest/userguide/pkcs11-mechanisms.html), only CKM_ECDH1_DERIVE is supported, and hmac_kdf is not supported. However there is an example code for HMAC KDF. After running src/derivation/hmac_kdf --pin userName:password, the handles for the base AES key and derived AES key are returned, but they cannot be found in the AWS CloudHSM using KMU command: findKey. How to make the HMAC KDF work in this case?

Start with src/derivation/hmac_kdf and compare the example's mechanism with the AWS CloudHSM supported-mechanisms documentation linked in the issue. Check the reported handles with KMU's findKey behavior, then determine whether the example should be corrected or its unsupported status documented.

Written by the indexing model from the issue text.