verify_signature returns None if the data is unsigned