- decRs := make([]byte, 8+32)
- salsa20.XORKeyStream(decRs, data[32:32+8+32], h.rNonce[:], h.key)
- h.rServer = new([8]byte)
- copy(h.rServer[:], decRs[:8])
- h.sServer = new([32]byte)
- copy(h.sServer[:], decRs[8:])
-
- // Generate R* and encrypt them
- h.rClient = new([8]byte)
+ decRs := make([]byte, RSize+SSize)
+ salsa20.XORKeyStream(decRs, data[SSize:32+RSize+SSize], h.rNonce[:], h.key)
+ h.rServer = new([RSize]byte)
+ copy(h.rServer[:], decRs[:RSize])
+ h.sServer = new([SSize]byte)
+ copy(h.sServer[:], decRs[RSize:])
+
+ // Generate R* and signature and encrypt them
+ h.rClient = new([RSize]byte)