The peers negotiate a session key from their ephemeral public keys in a two rounds exchange. In the vision of DJB this was designed to work with DNSCurve, wher

The peers negotiate a session key from their ephemeral public keys in a two rounds exchange. In the vision of DJB this was designed to work with DNSCurve, where network domain names are authenticated at the packet level.