X25519
LCRYPTO_ALIAS(X25519);
int X25519(uint8_t out_shared_key[X25519_KEY_LENGTH],
if (!X25519(out_key, ecx_key->priv_key, ecx_peer_key->pub_key))
LCRYPTO_USED(X25519);
if (!X25519(sk, ks->x25519_private, ks->x25519_peer_public))
if (!X25519(x25519_shared_key, ks->x25519_private,
if (X25519(out, private_key, kSmallOrderPoint)) {
X25519(out, kScalar1, kPoint1);
X25519(out, kScalar2, kPoint2);
X25519(out, scalar, point);