hmac.length: 32->64