add a small sample of hmac-sha256