this is not a buflen, it is an outlen. refs #696
Merge pull request #697 from reaperhulk/hmac-fix

Fix HMAC finalize buflen issue