rearranged the HMAC header to tolerate having missing hash types