I ended up having to base64 code them to compare them, but it's probably for the better: the hmac version was producing unprintable characters and newlines

https://github.com/Clever/sphinx/commit/5883a3066d822e72d1363ab03decd9e093b4cf77