sign data instead of encrypt