[noise] Boiled down noise implementation spec

[Trevor Perrin]

On Mon, Aug 31, 2015 at 9:38 AM, Jason A. Donenfeld <Jason at zx2c4.com> wrote:
> Nonces for transport messages begin at 1, not at 0! This is because I take
> advantage of x86 primitives for "increment and return" as an atomic
> operation, so I don't need locks for preventing nonce-reuse.

Why are 1-based nonces better than 0-based nonces, on x86?

Trevor