@fgrieu Update to the
Diffie-Hellman, random number size saga: I have now found an RFC restricting the secret exponent in DH to a fixed size (like 256 bits), including when that's a decimal order of magnitude less bits than the order of the generator used. But I can't update side-channel chit-chat as I do for answers..