The X3DH spec says that salt (presumably the nonce) is supposed
to be [0, 0, ..., 0] with the length of the hash. I seem to have
skipped over that.
From Section 2.2:
"HKDF salt = A zero-filled byte sequence with length equal to the
hash output length."
