[noise] The h value

[Trevor Perrin]

On Mon, Jul 20, 2015 at 5:38 AM, Jason A. Donenfeld <Jason at zx2c4.com> wrote:
> Hi guys,
>
> I'm wondering why `h` is included as AAD, and not simply hashed together
> with the current key (k = HASH(h || k)). Is this for IP reasons?

Partly - there's a patent on KEA+ from Microsoft that says something
about hashing data into session keys, and I wanted to be far away from
it.

Trevor