[noise] Explicit nonces (for lossy transports)

[Trevor Perrin]

On Mon, Jul 10, 2017 at 11:02 PM, Jon Callas <joncallas at icloud.com> wrote:
> As another example, there's also ZRTP (RFC 6189), which is designed for UDP, and more over to be slid into an existing UDP stream. There's plenty that you could steal from the basic framework.

Oh yeah, interesting.

Even aside from UDP, ZRTP has clever mechanisms (including
self-healing key-continuity, and the Short-Auth-Strings).  It would be
fun to try to reconstruct those in Noise.

The SAS in particular would require some notion of "committing" to a
DH value before revealing it, but it's possible that could be woven
into the pattern language in some way (never thought about that
before, but if anyone wants to attempt it, go for it!)

Trevor