fixed use of derived key in signatures