crypto: runtime-deprecate calling Hmac.digest() more than once

Emit a DEP0206 deprecation warning when Hmac.digest() is called on an
already-finalized instance. This behavior is inconsistent with
Hash.digest() which throws ERR_CRYPTO_HASH_FINALIZED.

Refs: #62838
PR-URL: https://github.com/nodejs/node/pull/REPLACEME

Author: developers-universe-1

doc/api/deprecations.md

@@ -4565,9 +4565,12 @@ changes:
   - version: v26.2.0
     pr-url: https://github.com/nodejs/node/pull/63121
     description: Documentation-only deprecation.
+  - version: REPLACEME
+    pr-url: https://github.com/nodejs/node/pull/REPLACEME
+    description: Runtime deprecation.
 -->
 
-Type: Documentation-only
+Type: Runtime
 
 Calling `hmac.digest()` more than once returns an empty buffer instead of
 throwing an error. This behavior is inconsistent with `hash.digest()` and

lib/internal/crypto/hash.js

@@ -87,6 +87,11 @@ const maybeEmitDeprecationWarning = getDeprecationWarningEmitter(
   },
 );
 
+const emitHmacDigestDeprecation = getDeprecationWarningEmitter(
+  'DEP0206',
+  'Calling Hmac.digest() more than once is deprecated.',
+);
+
 function Hash(algorithm, options) {
   if (!new.target)
     return new Hash(algorithm, options);
@@ -183,6 +188,7 @@ Hmac.prototype.digest = function digest(outputEncoding) {
   const state = this[kState];
 
   if (state[kFinalized]) {
+    emitHmacDigestDeprecation();
     const buf = Buffer.from('');
     if (outputEncoding && outputEncoding !== 'buffer')
       return buf.toString(outputEncoding);

test/parallel/test-crypto-hmac.js

@@ -39,6 +39,17 @@ assert.throws(
     name: 'TypeError',
   });
 
+// Verify runtime deprecation warning for calling digest() more than once.
+{
+  common.expectWarning(
+    'DeprecationWarning',
+    'Calling Hmac.digest() more than once is deprecated.',
+    'DEP0206');
+  const h = crypto.createHmac('sha1', 'key').update('data');
+  h.digest('hex');
+  h.digest('hex');
+}
+
 function testHmac(algo, key, data, expected) {
   // FIPS does not support MD5.
   if (crypto.getFips() && algo === 'md5')