sign and verify fixed