Function key_update_secret 

pub fn key_update_secret(
    provider: &impl CryptoProvider,
    suite: CipherSuite,
    old_secret: &Hash,
) -> Result<Hash, Error>

KeyUpdate: new_secret = HKDF-Expand-Label(old_traffic_secret, “traffic upd”, “”, Hash.length)