[noise] Post-Quantum Kyber and Noise

[Trevor Perrin]

On Thu, Jul 6, 2017 at 3:52 PM, Trevor Perrin <trevp at trevp.net> wrote:
>
> Assuming Rhys is right that we always want to perform
> encapsulation+MixKey together, there's a notation question.  Rhy
> suggests:
>  -> ekey1
>  <- ekem1
>
>  -> skey1
>  <- skem1
>
>
> Another option:
>  -> e1
>  <- e1e1
>
>  -> s1
>  <- s1e1
>
>
> A third option:
>  -> e1
>  <- e1kem
>
>  -> s1
>  <- s1kem

Another option:

Since each numbered set of KEM keys will only support a single KEM
operation, we could use a simpler notation:

-> e1
<- kem1

<- s2
-> kem2


Note that we could still use the numbered notation with DH.  E.g. you
could do hybrid forward secrecy with XX and 25519+448 as:

-> e, e1
<- e, e1, e1e1, s, es
-> s, se

Trevor