Min digest length for PRF underlying HMAC is 128 bits.
First stab at key manager APIs (core logic not yet ported from TFS)