https://kokil.com.np/blog/hmac-explained-message-authentication