use pubkey hash address comparison in VerifyMessage, instead of private keys