Tag Info

I don't know the protocol, so I'm not sure. It is a standard way of converting group elements (e.g. the shared value $g^{ab}$ you get after Diffie-Hellman) to keys. You don't need to worry about the specifics of the group when choosing a hash function, just use a cryptographic hash like SHA256. It's hard to know what the difference between those two is ...