Add HMAC test for invalid key len