SEC: add HMAC implementation.