This was omitted from the section, but can I assume I should also set the nonce to zero when deriving a new session, since k changes? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://moderncrypto.org/mail-archive/noise/attachments/20150705/c97ac54f/attachment.html>