- dec := new([32]byte)
- salsa20.XORKeyStream(dec[:], data[:32], h.rNonceNext(1), h.dsaPubH)
- h.key = dhKeyGen(h.dhPriv, dec)
+ sDHRepr := new([32]byte)
+ salsa20.XORKeyStream(sDHRepr[:], data[:32], h.rNonceNext(1), h.dsaPubH)
+ sDH := new([32]byte)
+ extra25519.RepresentativeToPublicKey(sDH, sDHRepr)
+ h.key = dhKeyGen(h.dhPriv, sDH)