Derives the 32-byte X25519 shared secret from our private key and the peer's raw public key. Rejects (per RFC 8731) if the result is all zero, which signals a small-order point attack.
Our ephemeral private key.
The peer's 32-byte raw public key.
The 32-byte shared secret K.
If the derived secret is all zero.
1.0.0
Derives the 32-byte X25519 shared secret from our private key and the peer's raw public key. Rejects (per RFC 8731) if the result is all zero, which signals a small-order point attack.