[noise] Explicit nonces (for lossy transports)

[Trevor Perrin]

On Tue, Jun 13, 2017 at 6:25 AM, Jake McGinty <me at jake.su> wrote:
>
> Maybethe simplest setup would be to leave the handshake itself unchanged and
> instead define an ExplicitNonceCipherState which encapsulates all the logic
> needed? The extension would just specify that Split() will break into two of
> these instead of the default CipherState.

Seems reasonable.


> Applications would be responsible for ensuring the order and integrity of
> the handshake messages before noise reaches the transport state.

That's probably the hard part, though!

Trevor