Update notes for submitted changes

* Use HMAC to verify symmetric key