Fix HMAC finalize buflen issue

Refs #696