Hardening Digital Signatures against Untrusted Signature Software