test for HMAC