> Curve25519 allows for much simpler code (for instance, there is no need for validation, since all sequences of 32 bytes are by definition valid), and the “nat

> Curve25519 allows for much simpler code (for instance, there is no need for validation, since all sequences of 32 bytes are by definition valid), and the “natural” Montgomery ladder is constant-time. It's worth noting that no validation is strictly necessary, but some iinputs can force the output to be all-0[1]. That should be checked. [1] RFC 7748 (https://www.ietf.org/rfc/rfc7748.txt https://www.ietf.org/rfc/rfc7748.txt), p. 14