state: verify MAC