kex

func GenerateKeyPair() (crypto.PrivateKey, crypto.PublicKey, error)

func GenerateNonce() ([]byte, error)

func SharedSecret(private crypto.PrivateKey, public crypto.PublicKey) ([]byte, error)

func Sign(
	privateKey ssh.Signer,
	nonce []byte,
	serverEphPubKey []byte,
	clientEphPubKey []byte,
	sharedSecret []byte,
) ([]byte, error)

func Verify(
	clientSignature []byte,
	nonce []byte,
	serverEphPubKey []byte,
	clientEphPubKey []byte,
	clientPublicKey ssh.PublicKey,
	sharedSecret []byte,
) error