invert pby when normalizing S during signing