Use low S to break signatures malleability issue