better HMAC-SHA1 tests