[noise] Negotiation and 0-RTT

[Alexey Ermishkin]

Ah, yes, That's even better

-----Original Message-----
From: Trevor Perrin [mailto:trevp at trevp.net] 
Sent: Friday, July 7, 2017 12:28 PM
To: Alexey Ermishkin <scratch.net at gmail.com>
Cc: noise <noise at moderncrypto.org>
Subject: Re: [noise] Negotiation and 0-RTT

On Fri, Jul 7, 2017 at 7:22 AM, Alexey Ermishkin <scratch.net at gmail.com> wrote:
> I'm sorry, what do you mean by transcript, is it the negotiation data? It's perfectly fine for me to use its hash as the prologue.

Sorry, I didn't explain well.  By transcript I meant the transmitted bytes.


> Why is it not included in the Reinit prologue calculation?

It is, by "client_version...server_version" I meant all the transcript from the client_version field until the server_version field, so all the fields with stars:

Message1 header:
 - 4 bytes: client_version*
 - 2 bytes: negotiation_len*
 - " bytes: negotiation_data*
 - 2 bytes: noise_message_len*
 - " bytes: noise_message*

Message2 header:
 - 4 bytes: server_version*
 - 2 bytes: noise_message_len
 - " bytes: noise_message

Trevor