In sign_verify/eddsa.js, the test "shortens" a signature by slicing off its first byte. Our implementation handles this differently than specified.
What is expected:
subtle.importKey should succeed
- verification should not throw error
subtle.verify should return false