- uses knot_dnssec_sign_verify() instead of string comparison
  and therefore OpenSSL EVP_VerifyFinal()
- previous approach could not work e.g. for DSA based ciphers

refs #4