[noise] Chaining variable
trevp at trevp.net
Fri Jul 11 09:32:06 PDT 2014
On Fri, Jul 11, 2014 at 12:47 AM, Stephen Touset <stephen at squareup.com> wrote:
> By my reading of the spec, when a client receives the first noise box from a
> server, the server does *not* send the chaining variable to the client.
Right. The chaining variable is never sent, it's just a local secret
to each party.
Is there some way to make that more clear? - (all this feedback on
ambiguity is very helpful, no-one should be shy if the docs are
> client now needs to call the KDF function four times in order to compute the
> chaining variable for the noise box it responds with.
The KDF gets called 2 times for the server's box, and 2 times for
client's box, does that make sense?
More information about the Noise