add HMAC Sign/Verify support