If addresses are hashes of public keys, how are signatures verified?
The transaction's INPUT has ScriptSig which is both the signature as well as the public key.


http://en.bitcoin.it/wiki/Transaction#Data