use crypto:hmac because crypto:md5_mac is deprecated