Check that S <= order/2 for canonical signatures