Use 'low S' as malleability breaker rather than 'even S'
Merge pull request #3016 from sipa/lows

Use 'low S' as malleability breaker rather than 'even S'