tests: add HMAC cycling test