docs: public static boolean verify(byte[] data, ECDSASignature signature, byte[] pub) {
          ECDSASigner signer = new ECDSASigner();
          ECPublicKeyParameters params = new ECPublicKeyParameters(CURVE.getCurve().decodePoint(pub), CURVE);
          signer.init(false, params);
          try {
              return signer.verifySignature(data, signature.r, signature.s);
          } catch (NullPointerException npe) {
              // Bouncy Castle contains a bug that can cause NPEs given specially crafted
              // signatures.
              // Those signatures are inherently invalid/attack sigs so we just fail them here
              // rather than crash the thread.
              logger.error("Caught NPE inside bouncy castle", npe);
              return false;
          }
      }