first working version (key creation/secret recovery/key signature)