[noise] Negotiation and 0-RTT
scratch.net at gmail.com
Fri Jul 7 00:29:25 PDT 2017
Ah, yes, That's even better
From: Trevor Perrin [mailto:trevp at trevp.net]
Sent: Friday, July 7, 2017 12:28 PM
To: Alexey Ermishkin <scratch.net at gmail.com>
Cc: noise <noise at moderncrypto.org>
Subject: Re: [noise] Negotiation and 0-RTT
On Fri, Jul 7, 2017 at 7:22 AM, Alexey Ermishkin <scratch.net at gmail.com> wrote:
> I'm sorry, what do you mean by transcript, is it the negotiation data? It's perfectly fine for me to use its hash as the prologue.
Sorry, I didn't explain well. By transcript I meant the transmitted bytes.
> Why is it not included in the Reinit prologue calculation?
It is, by "client_version...server_version" I meant all the transcript from the client_version field until the server_version field, so all the fields with stars:
- 4 bytes: client_version*
- 2 bytes: negotiation_len*
- " bytes: negotiation_data*
- 2 bytes: noise_message_len*
- " bytes: noise_message*
- 4 bytes: server_version*
- 2 bytes: noise_message_len
- " bytes: noise_message
More information about the Noise