use canonical signatures (if S > Order/2: S = Order - S)