title: Unexpected results using cryptoJS hmacMD5
body: <p>I have set up some encryption using cryptoJS library like so:</p>
  
  <p><strong>Adding more code following comments</strong></p>
  
  <p>Here is the script in full, I'll ask our vendor to provide a new secret</p>
  
  <pre><code>&lt;script src="https://crypto-js.googlecode.com/svn/tags/3.1.2/build/rollups/hmac-md5.js"&gt;&lt;/script&gt;
  
  &lt;script&gt;
  
  var now = new Date().getTime();
  var aid = 1941816;
  var sid = {{trialpay cookie values}}.sid;
  var user = {{user id}};
  var query_string = '?tp_aid=' + aid + '&amp;tp_sid=' + sid + '&amp;tp_t=' + now;
  // query_string var during instance in question was this = '?tp_aid=1941816&amp;tp_sid=U1281574706&amp;tp_oid=103060921&amp;tp_t=1435078629604'; 
  
  // hash md5
  var key = '8b2b7d7dc4063bc0bf30986536f8816c71405c16fb0cc4677db1e349af157baa';
  var hash = CryptoJS.HmacMD5(query_string, key);
  hash = hash.toString();
  
  //passback
  var tp_img = document.createElement('img');
  tp_img.height=1;
  tp_img.width = 1;
  
  //tp_img.src = "https://tpc.trialpay.com/" + query_string +  "&amp;tp_v1=" + hash;
  
  
  tp_img.src = "https://tpc.trialpay.com/?tp_aid=" +  aid +
                             "&amp;tp_sid=" + sid +
                             "&amp;tp_oid=" + encodeURIComponent(user) +
                             "&amp;tp_t=" + now + 
                             "&amp;tp_v1=" + hash;
  
  document.body.appendChild(tp_img);
  
  &lt;/script&gt;
  </code></pre>
  
  <p>During the instance of testing in question, I know that the var being hashed, <code>query_string</code>, was this value:</p>
  
  <pre><code>?tp_aid=1941816&amp;tp_sid=U1281574706&amp;tp_oid=103060921&amp;tp_t=1435078629604
  </code></pre>
  
  <p>The output that our vendor received was this value:</p>
  
  <pre><code>727a9075e3c8e7a7758e3f6a0369a476
  </code></pre>
  
  <p>They told me that they expected this value:</p>
  
  <pre><code>60eadcb01f3f04a3d7169a1dd0199943
  </code></pre>
  
  <p>When I check the output in my own environment using console.log(), I get the expected value. So I don't know how they got the value ending in 476.</p>
  
  <p>This is all that I know. Any help would be much appreciated. Let me know if there is any other info I can provide on this.</p>