Re: [Curdle] ssh-ed25519 implementations

Hi Setphan,

I think I will use this text...

    To clarify a corner-case in this conversion, when X is encoded as an
    mpint K, in order to calculate the exchange hash, it may vary as
    follows:

        Trim all leading zero-bytes of X. If X is all zero-bytes,
	then the key exchange must fail.

        If the high bit of X is set, the mpint format requires
	a zero byte to be prepended.

        The length of the encoded K may not be the same as the
	original length of X due to trimming or prepending a
	zero-byte as needed for "mpint" format.

I will also add your suggested pseudo code.

	Thank you,
	-- Mark