use check-sig-dos twice