RE: Curve25519/448 key agreement for SSH

[Peter Gutmann <pgut001%cs.auckland.ac.nz@localhost>]

Simon Josefsson <simon%josefsson.org@localhost> writes:

>A discussion on CFRG came up recently about checking for the all-zero
>shared secret.  Does anyone know if libssh or OpenSSH (or anyone else)
>performs this check? 

I check for too-small values (too many leading zeroes), of which all-zero
is a special case, as well as a few other oddball things.

Peter.