tree 7d2d98010f58298d24a7e14a64f350f5b8cf12be
parent 4186b711f46cb353fa18dd06ea424bb452f8d310
author Adam Langley <agl@google.com> 1466448273 -0700
committer David Benjamin <davidben@google.com> 1466449075 +0000

Always generate X25519 private keys that need to be masked.

In order to ensure that we don't randomly interoperate with
implementations that don't mask scalars correctly, always generate
scalars with the wrong fixed bits.

Change-Id: I82536a856f034cfe4464fc545a99c21b3cff1691
Reviewed-on: https://boringssl-review.googlesource.com/8391
Reviewed-by: David Benjamin <davidben@google.com>