in pan-domain-auth-verification/src/main/scala/com/gu/pandomainauth/service/Crypto.scala [30:36]
def verifySignature(data: Array[Byte], signature: Array[Byte], pubKey: PublicKey) : Boolean = {
val rsa = signatureInstance()
rsa.initVerify(pubKey)
rsa.update(data)
rsa.verify(signature)
}