DH_KPP_SECRET_MIN_SIZE
return DH_KPP_SECRET_MIN_SIZE + dh_data_size(p);
if (unlikely(!buf || len < DH_KPP_SECRET_MIN_SIZE))