tree d37c85fd0afd0ad0eb3215bc7f855969477723d7
parent 41c10e2b5f37edce8b9f292f7f3bacb7e30e25c4
author Adam Langley <agl@google.com> 1545074183 -0800
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1545080578 +0000

HRSS: be strict about unused bits being zero.

It's excessively complex to worry about leaving these few bits for
extensions. If we need to change things, we can spin a new curve ID in
TLS. We don't need to support two versions during the transition because
a fallback to X25519 is still fine.

Change-Id: I0a4019d5693db0f0f3a5379909d99c2e2c762560
Reviewed-on: https://boringssl-review.googlesource.com/c/33704
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: David Benjamin <davidben@google.com>