reverse hashes before signing/verifying.