ECDH security fix