12abf43b Sun Jul 03 20:20:23 GMT 2011 mikeb <mikeb@openbsd.org> iked requires the same dh diff as isakmpd:
When BN_bn2bin converts a bignum to the binary representation it skips leading zeroes if there are any. To accommodate the difference with the protocol we need to prepend those zeroes ourselves.