Pieter Wuille

@real-or-random Actually since both of the commits are yours, and perhaps you want to make some changes, perhaps you should open a PR for them? I'll rebase this and/or open...

@real-or-random Ping? > Yep, I'll take care of that!

@real-or-random > Will do today or tomorrow! Never mind, rebased.

@Sjors This reminds me to pick this up again. We agreed that the interface needed a rewrite to use the safer approach the ellswift module uses (with a default hasher...

@Sjors That will work. In other words, negating the private key of one of the sides (or of both sides) won't change the resulting shared X coordinate. It will change...

@Sjors Not that I know of. What does Sv2 use?

@Sjors Heh, it's not specified how the shared point is serialized? That's worth addressing in the spec if possible (... or if it can still be changed, use ellswift?). In...

@Sjors Is it an option to use ellswift negotiation instead? It's effectively a drop-in replacement for ECDH, except the public keys are 64 bytes instead of 32. Depending on how...

@Sjors rust-secp256k1 appears to have ellswift bindings, but I don't know anything about Rust myself.

Rebased after the merge of #487. I believe the text here contains further improvements.