Avoid constructing an invalid signature with probability 1:2^256.
Merge pull request #175

d26e26f Avoid constructing an invalid signature with probability 1:2^256. (Gregory Maxwell)