I'm currently working with an HMAC/MD5 implemented in JavaScript *wince* I've seen the code around before, I think it's working correctly and built to the standards, but I seem to get back different strings from it and from the Mentalis HMAC. Anyone have any ideas? I'd much rather use the mentalis solution, but I don't know why they would return different results.

Thanks in advance for any help!
Matt Davis.

Can you post some results?
The code in the Security Library has been tested against well known HMAC-MD5 results and in all cases the correct results were returned.
Here's a document with some correct HMAC-MD5 results: http://www.faqs.org/rfcs/rfc2202.html