I merged the HKDF branch to master: I don't think trying to squeeze out a few percent speedup is worth the effort of straying from the HKDF herd. https://github.com/trevp/noise/blob/master/noise.md Hopefully the design is done now. I'll be trying some implementations, I encourage people to do the same, and we'll see if any rough points emerge. Trevor