DOC rollover into 0.1.5
RF: use openssl call for HMAC, despite being slower

- simplifies the code, more consistent ("openssl used for all crypto")
RF: variable name cleanup