switch back to hmac for private key generation