103:        $hmac = hash_hmac('sha256', $serialized, Security::getNonceKey());
104:        $this->__set($name, "v2|{$hmac}|" . $serialized);
120:        if (is_string($stored) && str_starts_with($stored, 'v2|')) {
121:            // 3-field format: v2|<hmac>|<serialized>. The serialized payload may
126:                $actualHmac = hash_hmac('sha256', $serialized, Security::getNonceKey());
127:                if (hash_equals($expectedHmac, $actualHmac)) {