In fact this won't be necessary, my code was the problem... part of it is written in C and I had forgotten a few free() which would result in a wrong HMAC hash the second time...