Thanks for your bug report and the test scripts showing the expected output. The issue was due to the initial shortening of the key if it was longer than the block size. The key was being shortened if it was larger than 64 bytes for all hashes, when it should only be shortened for sha384/512 if it is longer than 128 bytes. This has been fixed for the next version.
