pub static X25519_LOW_ORDER_POINTS: [MontgomeryPoint; 7]Expand description
X25519 low order points.
The output of any scalar multiplied by these points is zero. Protocols which need to ensure “contributory” behavior should reject these points.
Table adapted from https://cr.yp.to/ecdh.html.