This mistake affected RSA signing/verification as well. I've corrected it in #906 there. Will update this PR shortly.