To reduce complexity we could stop using rbnacl for the hmac algos after #549 is done. I think even the openssl hmac algorithms performed faster than the ones in rbnacl (no facts to back this up).