Fix buffer overrun in RSA signing