@tedu SSH code comes from the supercop as well.
@tedu I thought there might have been a reason along the lines of "DJB wrote me to mention that the ref10 code is still undergoing review, and won’t be recommended for actual use for another couple of weeks.": https://blog.mozilla.org/warner/2012/02/11/new-ed25519-ref10-implementation-available-20x-faster/
But right now it's used in libsodium.
Exclusive or something