[noise] e empty or not?

david wong davidwong.crypto at gmail.com
Sat Apr 23 12:59:04 PDT 2016

So you're implying that you could initialize "e" at the start of the protocol.
Wouldn't that defeat the purpose of an "ephemeral" key?



> On Apr 23 2016, at 2:58 pm, Trevor Perrin <trevp at trevp.net> wrote:  


> Your e variable might be empty at the beginning of a protocol, but  
once you have sent a message which starts with an e token, it will get  


> Trevor


On Sat, Apr 23, 2016 at 12:55 PM, david wong
<davidwong.crypto at gmail.com> wrote:  
> In section 8.1 Pattern validity:  
>> Noise patterns must be valid in the following senses:  
>> Parties must send a fresh ephemeral public key at the start of the
>> message they send (i.e. the first token of the first message pattern
in each  
>> direction must be "e").  
> but in section 2.2:  
>> Each party maintains the following variables:  
>> s, e: The local party's static and ephemeral key pairs (which may be  
>> empty).  
> so can e be empty, or does e have to be here. I'm a bit confused  
> David  
> _______________________________________________  
> Noise mailing list  
> Noise at moderncrypto.org  
> https://moderncrypto.org/mailman/listinfo/noise  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://moderncrypto.org/mail-archive/noise/attachments/20160423/7d39e5a4/attachment.html>

More information about the Noise mailing list