SSHd: add ETM MACs for SHA2