BTW, if anyone is using a Java library to make RESTlet calls and having trouble upgrading from HMAC-SHA1 to HMAC-SHA256, please respond here (in a thread). I have been working on the same issues and have some potential solutions.