Tag cryptographic key derivation