Improper Verification of Cryptographic Signature in tough library