build_curve_signature() processes hash not data