oneshot_hash
return oneshot_hash(ctx, x, X448_PRIVATE_BYTES, ed,
if (!oneshot_hash(ctx, secret_scalar_ser, sizeof(secret_scalar_ser),
if (!oneshot_hash(ctx, expanded, sizeof(expanded), privkey,