Tags: o-gs/og_verify

sign.py: add a parameter to generate only the signature header

By providing the -H command line parameter, the .sig will only contain
the header + signature and not the actual payload. This scheme is used
by the nfz.db e.g.

replace libtomcrypt with an embedded AES implementation