use openssl rather than ruby-hmac