Optional
secretSeed: Uint8ArrayOptional
prng: RandomSourceReadonly
acceptAccept message length in bytes
Readonly
offerOffer message length in bytes
Readonly
savedSaved state length in bytes *
Readonly
sharedShared key length in bytes *
Serializes secret offering party state into byte array.
This function should be called after offer() if the offering party cannot keep KeyAgreement instance in memory. When it receives accept message, it can create a new instance and call restoreState() on it with the serialized state to recover to continue the agreement.
X25519 key agreement using ephemeral key pairs.
Note that unless this key agreement is combined with an authentication method, such as public key signatures, it's vulnerable to man-in-the-middle attacks.