Add hmac_sha256, based on existing/libsodium implementations.

No tests yet.