8.2. Signature and verification