avatar & file hmac