Fix `hash/hmac`

In addition to a little CS fix (in order to be consistent).