fix(protocol): single signature encoding policy and canonical der (#744)