[noise] e empty or not?

[david wong]

So you're implying that you could initialize "e" at the start of the protocol.
Wouldn't that defeat the purpose of an "ephemeral" key?

  

David

> On Apr 23 2016, at 2:58 pm, Trevor Perrin <trevp at trevp.net> wrote:  

>

> Your e variable might be empty at the beginning of a protocol, but  
once you have sent a message which starts with an e token, it will get  
populated.

>

> Trevor

>

>  
On Sat, Apr 23, 2016 at 12:55 PM, david wong
<davidwong.crypto at gmail.com> wrote:  
> In section 8.1 Pattern validity:  
>  
>> Noise patterns must be valid in the following senses:  
>> Parties must send a fresh ephemeral public key at the start of the
first  
>> message they send (i.e. the first token of the first message pattern
in each  
>> direction must be "e").  
>  
> but in section 2.2:  
>  
>> Each party maintains the following variables:  
>> s, e: The local party's static and ephemeral key pairs (which may be  
>> empty).  
>  
> so can e be empty, or does e have to be here. I'm a bit confused  
>  
> David  
>  
> _______________________________________________  
> Noise mailing list  
> Noise at moderncrypto.org  
> https://moderncrypto.org/mailman/listinfo/noise  
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://moderncrypto.org/mail-archive/noise/attachments/20160423/7d39e5a4/attachment.html>