ECDSA Low-S Malleability Exploit in a Protocol