Use bouncycastle for signature verification