verify(): hash is Buffer, not byte array (see #14)
0.5.3