What it solves
A protocol integration needs the X25519 primitive with explicit failure handling.
How it works
1CSPRNG + peer key→2X25519→3checked shared secret→4caller KDF
Use it when
Derive an X25519 public key
Compute a checked shared secret
Clear key material explicitly
Quick Start
#include "microdh.h"
/* Generate with a caller CSPRNG, exchange public keys, then call the checked shared-secret API. */Engineering evidence
- RFC 7748 million-iteration slow test and host/compiler verification are documented
Known limits
- Not authenticated key exchange or a full protocol
- Requires a CSPRNG, KDF and identity authentication
- No formal side-channel verification or independent audit