add blake2b/blake2s support for hmac (#3873)

* add blake2b/blake2s support for hmac

This was a bug, but it turns out the noise protocol suggests using the
HMAC construction with BLAKE2 (rather than BLAKE2's own keyed
functionality) for a few reasons, so we should support it.

* actually test the thing
3 files changed