ecdsa: add SEC annotations for verify