use sha2 implementation by Aaron D. Gifford
add hmac-sha256/512