The peers negotiate a session key from their ephemeral public keys in a two rounds exchange.

In the vision of DJB this was designed to work with DNSCurve, where network domain names are authenticated at the packet level.