participants in payload extractor pattern

To send a handshake message, the sender specifies the payload and sequentially processes each token from a message pattern. The payload may contain certificates or other data chosen by the application. Encryption of static public keys and payloads provides some confidentiality and key confirmation during the handshake phase.Ī handshake message consists of some DH public keys followed by a payload. Encryption with k uses some AEAD cipher mode (in the sense of Rogaway ) and uses the current h value as associated data which is covered by the AEAD authentication. The key k and nonce n are used to encrypt static public keys and handshake payloads. Whenever a new DH output causes a new ck to be calculated, a new k is also calculated. K, n: An encryption key k (which may be empty) and a counter-based nonce n. Once the handshake completes, the chaining key will be used to derive the encryption keys for transport messages. H: A handshake hash value that hashes all the handshake data that's been sent and received.Ĭk: A chaining key that hashes all previous DH outputs. Rs, re: The remote party's static and ephemeral public keys (which may be empty). S, e: The local party's static and ephemeral key pairs (which may be empty). The core of Noise is a set of variables maintained by each party during a handshake, and rules for sending and receiving handshake messages by sequentially processing the tokens from a message pattern.Įach party maintains the following variables: A handshake pattern specifies the sequential exchange of messages that comprise a handshake.Ī handshake pattern can be instantiated by DH functions, cipher functions, and hash functions to give a concrete Noise protocol. Message patterns are arranged into handshake patterns.Ī message pattern is a sequence of tokens that specifies the DH public keys that comprise a handshake message, and the DH operations that are performed when sending or receiving that message. This language consists of tokens which are arranged into message patterns. A Noise handshake is described by a simple language. The Noise framework supports handshakes where each party has a long-term static key pair and/or an ephemeral key pair. After the handshake phase each party can use this shared key to send encrypted transport messages. During this handshake phase the parties exchange DH public keys and perform a sequence of DH operations, hashing the DH results into a shared secret key. TerminologyĪ Noise protocol begins with two parties exchanging handshake messages. Noise can describe protocols that consist of a single message as well as interactive protocols. Noise is a framework for crypto protocols based on Diffie-Hellman key agreement.

Security properties for deferred patterns DH functions, cipher functions, and hash functions Interactive handshake patterns (deferred) Interactive handshake patterns (fundamental)

Participants in payload extractor pattern