secp256r1 is mandated by IETF RFC8446 section 9.1; use it as a fallback for X5519, despite it likely never being used.