Verify chain-signed messages: tempering-resistant even if compromised