voa: check_signature now returns the size of the signature block

includes the extra 2 bytes for the sig size.
voa: subtract sig block size from encryption block

otherwise we decrypt too much resulting in wrong cleartext