The fact that he knew about that function and you (standing in as "representative Python developer") did not seems to justify the library pretty nicely from what I can tell.
But, obviously, this code does more than Python's hmac library does, beyond just knowing how to properly verify the MAC itself.
But, obviously, this code does more than Python's hmac library does, beyond just knowing how to properly verify the MAC itself.