hmac length varies with other digest (sha256, ...).
See http://tools.ietf.org/html/rfc6238#appendix-A