[noise] Extensions for forward secrecy and New Hope

[Trevor Perrin]

On Sat, Sep 3, 2016 at 1:53 PM, Rhys Weatherley
<rhys.weatherley at gmail.com> wrote:
> I'm working on the updates.  A small terminology question:
>
> On Wed, Aug 31, 2016 at 4:09 PM, Trevor Perrin <trevp at trevp.net> wrote:
>>
>>  * extra -> hybrid in a few places
>
>
> The "hybrid" forward secrecy occurs when the two DH algorithms are combined,
> but how do we refer to the algorithms themselves in isolation?
>
> A lot of the instances of "extra forward secrecy" in the text are referring
> specifically to *_F operations and key values.  It doesn't seem right to
> call these "hybrid" as they are one component of the hybrid, not the hybrid
> itself.

Hmm, "transitional" has the same problem...  I see that "extra" for
"Extra Forward Secrecy" and "efs" isn't bad, if we removed extra
symmetric keys maybe it would be more clear.  However if we're going
to use "f" for the token and variable names, it would be nice to have
something that matches that, but "extra" and "f" clash with
"ephemeral" and "e".

What do you think about "Further Forward Secrecy", "ffs" for the
pattern transformation, and *_FFS for the pseudocode names?

Trevor