This makes single signature verification about 60% faster. Also check that R is not the identity point.