B64 derivePK(B64 secretKey) { var sk = secretKey.decode(); if (sk.length < ed25519.PrivateKeySize) { throw ExInvalidSK; } return B64.encode(sk.sublist(32).toList()); }