- in some cases the shared secret returned by mbedtls is shorter than expected
add the missing heading zeros when needed