Instead of using a define and conditional building of sha1.c parts, move the TLS PRF implementation into a separate file.