Why We Don't Use Raw ECDH Output: HKDF Session Key Derivation

Why we don't use the raw X25519 shared secret as an AES key. HKDF-SHA256 with a versioned, nonce-salted construction gives per-connection key separation and protocol versioning.