Previous versions of v3.public contained high values for S in the (R, S) encoding.

While this is fine for most cases, there are some ECDSA implementations that only permit low-S values. Thus, for compatibility, we now only provide low-S test vectors for valid tokens.

See paragonie/paserk-php#12

See paseto-standard/paserk#13 for more information

We now have sufficient failing tests to promote misuse resistance.