diff --git a/TODO b/TODO
index f293e2a..97c9b82 100644
--- a/TODO
+++ b/TODO
@@ -12,4 +12,6 @@ malloc() new pointers in functions only if not NULL, e.g. pcp_gennonce()
 
 generalize file i/0, open+close only in src/, print msg if using stdin or stdout
 
-put the key import and export stuff into the lib, support from/to file and string
\ No newline at end of file
+put the key import and export stuff into the lib, support from/to file and string
+
+check pub key count in pcp.c before calling verify signature, croak if count==0
\ No newline at end of file