now supports MAC-verification