crypto: add hmac truncate option