EdDSA signature plan is susceptible to single-fault assaults