[pbhjpbhj]

Verify the signature, check the time, use the hash as if it were the password to re-hash and compare with DB?