and fixing a bug introduced in 0.5.0 (not updated in ports until post-5.5): "when crypto_sign_open() was given a signed message too short to even contain a signature, it was putting an unlimited amount of zeros into the target buffer instead of immediately returning -1."