static verify-sig
