[noise] certificate chains

[Trevor Perrin]

Hi Arvid,

Sorry for delay -

On Tue, Jul 3, 2018 at 4:45 PM, Arvid Picciani <aep at exys.org> wrote:
>
> NN
>    -> e
>    <- e, ee [u, u(h)]
>    -> [u, u(h)]
>
> this looks identical to your proposed XXsig, except yours seems to be
> signatures of the static key rather than the hash.

I was signing the handshake hash as well.

I'd like Noise to have an "official" named handshake pattern for this.
It's useful to design these things in conjunction with people who want
to use them, so if you're willing to work with us for the next month
or two we could try to figure out how to do this officially.

For example, my recent post on "Multi-algorithm handshakes" had a
slightly different naming proposal, so we'll have to work through
these (and other) options:

XXsig1i+sig1r  (e.g. XXsig1i+sig1r_25519+Ed25519)
  -> e
  <- e, ee, s1, sig1
  -> s1, sig1


Trevor