Add hmac_sha256, based on existing/libsodium implementations.