[noise] MAC'ing recipient public key
trevp at trevp.net
Sun Jul 13 22:08:01 PDT 2014
The recipient pubkey is included in the additional authenticated data
for both box MACs. This ensures that if the sender can decrypt a box,
it must have been encrypted to the sender's pubkey. While this can
also be accomplished by taking care with the ECDH, I think it's
simpler to just include the recipient's key into the mac.
Also, I changed the order of arguments to ENCRYPT() to match
noise_body(), so authtext is always listed last.
More information about the Noise