source OpenSSL 3.1.4 https://github.com/openssl/openssl/blob/openssl-3.1.4/crypto/ec/curve25519.c#L211
parameter a24
assume a24 = (a+2)/4
assume Z1 = 1
coords xz