[noise] Post-Quantum Kyber and Noise

[Trevor Perrin]

On Thu, Jul 6, 2017 at 5:31 PM, Trevor Perrin <trevp at trevp.net> wrote:
> Another option:
>
> Since each numbered set of KEM keys will only support a single KEM
> operation, we could use a simpler notation:
>
> -> e1
> <- kem1
>
> <- s2
> -> kem2
>
>
> Note that we could still use the numbered notation with DH.  E.g. you
> could do hybrid forward secrecy with XX and 25519+448 as:
>
> -> e, e1
> <- e, e1, e1e1, s, es
> -> s, se

I forget an ee there:

-> e, e1
<- e, e1, ee, e1e1, s, es
-> s, se

Trevor