[ok] sign and verify file