[noise] Chaining variable

[Trevor Perrin]

On Fri, Jul 11, 2014 at 12:47 AM, Stephen Touset <stephen at squareup.com> wrote:
> By my reading of the spec, when a client receives the first noise box from a
> server, the server does *not* send the chaining variable to the client.

Right.  The chaining variable is never sent, it's just a local secret
to each party.

Is there some way to make that more clear? - (all this feedback on
ambiguity is very helpful, no-one should be shy if the docs are
confusing).


> The
> client now needs to call the KDF function four times in order to compute the
> chaining variable for the noise box it responds with.

The KDF gets called 2 times for the server's box, and 2 times for
client's box, does that make sense?

Trevor