msghash should be less than curve order