You don't actually need the signing if you have the counters (if your ~only goal is to prevent replay attacks of that form).