Avoid constructing an invalid signature with probability 1:2^256.