[noise] RFC: Encrypted sliding window transport layer

Jason A. Donenfeld Jason at zx2c4.com
Mon Jun 22 12:41:57 PDT 2015


I too am working on something similar, in the context of a UDP-based VPN.
It's a bit tricky because not only can packets be dropped but they can also
arrive out of order. So that makes a constantly changing and synchronized
key, as used by noise, not quite possible. I'm opting just to start
initiating a rekeying handshake every 2 minutes, trying every 5 seconds
until it completes a rekeying handshake, and tossing the old key after 3
minutes.

-- 
Jason A. Donenfeld
Deep Space Explorer
fr: +33 6 51 90 82 66
us: +1 513 476 1200
www.jasondonenfeld.com
www.zx2c4.com
zx2c4.com/keys/AB9942E6D4A4CFC3412620A749FC7012A5DE03AE.asc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://moderncrypto.org/mail-archive/noise/attachments/20150622/2f5e18d2/attachment.html>


More information about the Noise mailing list