[noise] Replacing TLS with noise
Scratch
scratch.net at gmail.com
Thu Dec 29 00:56:52 PST 2016
Hi Nathan, thanks for the info. I've already took a look at wireguard
and may consider some of its ideas. However I'll stick with TCP for
now.
2016-12-29 13:11 GMT+05:00 Naveen Nathan <naveen at lastninja.net>:
>> Hello everyone!
>> I'm looking into implementing a secure transport layer for communication
>> between micro services. I don't want TLS because I don't need x.509 and
>> all that stuff. I know that there's a proposal for TLS 1.3 to have a"keys
>> only" mode, but it's still not accepted and i'm not sure it will get into
>> standard.Keys are perfectly enough for me. But I also don't want to
>> invent a bicycle here and use as much already invented things as possible.
>> Maybe there's whatsapp's packet structure (the new one, with noise)
>> somewhere? Or maybe someone has already done such a protocol that I could
>> implement and be compatible?A
>> Thanks in advance.
>
> Presently there are only few known applications using Noise:
> * WhatsApp / Signal
> * Wireguard
>
> The internals of Wireguard is pretty well specified in the whitepaper [1]
> and uses the Noise_IK pattern. It aims for the simplicity of "ssh keys" model
> but for VPN. But on top of the protocol itself is a tad bit of complexity
> due to key-rollover and such. I would consider it as a reference, but
> you will probably need to tailor an underlying messaging/transport protocol
> to suit your needs - and probably give extra consideration to section 12
> in the noise spec (Application Responsibilities).
>
> - Naveen
>
> [1]: https://www.wireguard.io/papers/wireguard.pdf
> _______________________________________________
> Noise mailing list
> Noise at moderncrypto.org
> https://moderncrypto.org/mailman/listinfo/noise
More information about the Noise
mailing list