Use SHA256 for HMAC comparison.