lib: verify PPK MAC