UPD: converted to SHA256 HMAC