The signature algorithm for the webhook signature (sent as x-hub-signature) is HMAC-SHA1. The string you sign with your secret key should be UTF-8 encoded.