fix hmac compare