[noise] Replacing TLS with noise

Naveen Nathan naveen at lastninja.net
Thu Dec 29 00:11:32 PST 2016


>    Hello everyone!
>    I'm looking into implementing a secure transport layer for communication
>    between micro services. I don't want TLS because I don't need x.509 and
>    all that stuff. I know that there's a proposal for TLS 1.3 to have a"keys
>    only" mode, but it's still not accepted and i'm not sure it will get into
>    standard.Keys are perfectly enough for me. But I also don't want to
>    invent a bicycle here and use as much already invented things as possible.
>    Maybe there's whatsapp's packet structure (the new one, with noise)
>    somewhere? Or maybe someone has already done such a protocol that I could
>    implement and be compatible?A 
>    Thanks in advance.

Presently there are only few known applications using Noise:
 * WhatsApp / Signal
 * Wireguard

The internals of Wireguard is pretty well specified in the whitepaper [1]
and uses the Noise_IK pattern. It aims for the simplicity of "ssh keys" model
but for VPN. But on top of the protocol itself is a tad bit of complexity
due to key-rollover and such. I would consider it as a reference, but
you will probably need to tailor an underlying messaging/transport protocol
to suit your needs - and probably give extra consideration to section 12
in the noise spec (Application Responsibilities).

- Naveen

[1]: https://www.wireguard.io/papers/wireguard.pdf


More information about the Noise mailing list