verify signature while unwrapping