Good to know. But HMAC is wrong anyway, so I will change this in the next days. See discussion on reddit: http://www.reddit.com/r/crypto/comments/2qqrvn/check_out_cryptomator_an_open_source_personal/cn9wsno