finished CGA-TSIG verification code (except for old public key/signature handling)