I bet you have, but you are using the "Sandbox API Credentials", as on my Payments Pro Account i have a login for Sandbox and a login for Live, both have different credentials and sigs.
Have you tested your credentials using a stand-alone script to check if its the credentials at fault and not ecart?