Made the signCb optional (encryption is processor bound, not IO bound, so the cb didn't make a lot of sense).