HMAC verification passes (Android -> iOS)