rework signing/verifying of messages