x25519_ge_scalarmult_base
x25519_ge_scalarmult_base(&A, az);
x25519_ge_scalarmult_base(&R, nonce);
x25519_ge_scalarmult_base(&A, e);
void x25519_ge_scalarmult_base(ge_p3 *h, const uint8_t a[32]);