So, basically reverse roles of public key and private key for signing/verification?