Simon Josefsson simon@josefsson.org writes:
The URL is: http://tools.ietf.org/html/draft-turner-thecurve25519function-00
Hmm. I've had a look. I think the test vector there is identical to the one in your draft, except that the secret keys are random 256-bit values (little endian), *before* the specified masking to force bits 0, 1, 2, 255 = 0 and bit 254 = 1. Which had me confused for a while.
Regards, /Niels