[noise] Potential forgery attack on "ee, ss" patterns

[David Wong]

Is there anything in the spec that says that you can safely combine
tokens and create a secure pattern? My impression was that the Noise
spec underlines ways to create handshake patterns (secure or not) and
that the spec specifically defines a subset of them along with the
security properties they provide. And as you can see in the spec not
all patterns are created equal.

David