crypto_sign() prepends the signature, it doesn't append it.