rename hmacKey to firmKey