Use HMAC instead of concatenation.