signing works but i'll have to redo attaching and still do encrypting