[noise] Negotiation and 0-RTT

[Trevor Perrin]

On Fri, Jul 7, 2017 at 7:22 AM, Alexey Ermishkin <scratch.net at gmail.com> wrote:
> I'm sorry, what do you mean by transcript, is it the negotiation data? It's perfectly fine for me to use its hash as the prologue.

Sorry, I didn't explain well.  By transcript I meant the transmitted bytes.


> Why is it not included in the Reinit prologue calculation?

It is, by "client_version...server_version" I meant all the transcript
from the client_version field until the server_version field, so all
the fields with stars:

Message1 header:
 - 4 bytes: client_version*
 - 2 bytes: negotiation_len*
 - " bytes: negotiation_data*
 - 2 bytes: noise_message_len*
 - " bytes: noise_message*

Message2 header:
 - 4 bytes: server_version*
 - 2 bytes: noise_message_len
 - " bytes: noise_message

Trevor