[noise] NoiseSocket and payload padding in handshake messages

[Alexey Ermishkin]

Let me talk with our guys who implement it, they might remember better

-----Original Message-----
From: Trevor Perrin <trevp at trevp.net> 
Sent: Tuesday, April 17, 2018 9:32 PM
To: Alexey Ermishkin <scratch.net at gmail.com>
Cc: Nemanja Mijailovic <metalnem at mijailovic.net>; noise <noise at moderncrypto.org>
Subject: Re: [noise] NoiseSocket and payload padding in handshake messages

On Tue, Apr 17, 2018 at 4:14 PM, Alexey Ermishkin <scratch.net at gmail.com> wrote:
> Hello everyone,
> This is when padding was dropped from the handshake 
> https://moderncrypto.org/mail-archive/noise/2017/000931.html

Ah, I missed that, sorry.

Let's take a moment to think about this and make sure we know what decision we're making, and why we're making it.

On the one hand, I'm not sure why padding would be less-useful for handshake ciphertext than transport ciphertexts.  On the other hand, maybe the structure of Noise libraries and the fact that handshake payloads are sometimes encrypted and sometimes not, makes this an awkward thing to support?

Trevor