Comment by GoblinSlayer

It's also possible to generate ephemeral keys deterministically, e.g. key=hash(escrow, sslrandom).