two programs (one to create keys, one to recover secret (soon)), keys HMAC-ed