X3DH (Extended Triple Diffie-Hellman) key agreement protocol, following Bhargavan et al. (USENIX Security 2024).