hmac: add support for SHA-2