yes because you are feeding a hex encoded version to hmac
but it does not improve security
yes because you are feeding a hex encoded version to hmac
but it does not improve security
ok that's what I thought. so if there, hypothetically, was an implementation doing that, it probably was by mistake then?