added ECDH with OpenSSL (see RFC 4753)