[noise] certificate chains

Trevor Perrin trevp at trevp.net
Thu Jul 12 23:44:00 PDT 2018


Hi Arvid,

Sorry for delay -

On Tue, Jul 3, 2018 at 4:45 PM, Arvid Picciani <aep at exys.org> wrote:
>
> NN
>    -> e
>    <- e, ee [u, u(h)]
>    -> [u, u(h)]
>
> this looks identical to your proposed XXsig, except yours seems to be
> signatures of the static key rather than the hash.

I was signing the handshake hash as well.

I'd like Noise to have an "official" named handshake pattern for this.
It's useful to design these things in conjunction with people who want
to use them, so if you're willing to work with us for the next month
or two we could try to figure out how to do this officially.

For example, my recent post on "Multi-algorithm handshakes" had a
slightly different naming proposal, so we'll have to work through
these (and other) options:

XXsig1i+sig1r  (e.g. XXsig1i+sig1r_25519+Ed25519)
  -> e
  <- e, ee, s1, sig1
  -> s1, sig1


Trevor


More information about the Noise mailing list