Verifiable Composition of Signature and Encryption