HMAC might be implemented - working out how to test the cryptobits.