verify-tag: factor out signature detection