message signing based on hmac done