If you already have something suitable for the key that you have, why are you using it to create another key? Personally, I see no benefit by embedding it in derived bytes, since you already have a cryptographically secure random number.
source
share