use the first hash as the verify key