456: added bit mask to Curve25519 ECDH generated keys to yield valid keys only