add signfile tool
allow verifying the integrity of the update info file