[update] fix (unexploitable) BB'06 vulnerability in rsa_verify