crypto-native: add SHA2-HMAC