TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Intro to securing communication protocols with Noise

39 点作者 grundprinzip超过 4 年前

3 条评论

lucb1e超过 4 年前
Note that this Noise Protocol is just an alternative to TLS; it is not actually about adding noise to your data to prevent metadata leaking (sending noise to random people to hide contacts, sending noise to hide how much you're talking to different contacts, or just sending noise alongside messages to hide how much you're talking to one contact or how large your messages are). I'm confused every time this noise protocol comes up (apparently not often enough for me to remember right away). The "communication" in the title should also not be interpreted too specifically. It's just about two computers talking to each other, not about securing your communications by adding noise, perhaps that added to the confusion in this case.
bpolverini超过 4 年前
If you&#x27;re interested in seeing an interesting off broadway twist on the Noise Protocol Spec, libdisco and strobe are really interesting:<p><a href="https:&#x2F;&#x2F;www.discocrypto.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.discocrypto.com&#x2F;</a><p><a href="https:&#x2F;&#x2F;strobe.sourceforge.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;strobe.sourceforge.io&#x2F;</a><p>The Noise Protocol spec is fantastic. It asks a reasonable set of questions to a protocol designer and in exchange gives a set of safe choices for key exchange. It&#x27;s a great example of building powerful systems from a handful of simple abstractions. Trevor Perrin (and I&#x27;m sure, not just he) did a phenomenal job.
motohagiography超过 4 年前
In terms of how people who work with security protocols can reason about it, was not-including a spec either in the Standard Notation for security protocols or a sequence diagram on purpose? I thought these were pretty standard conventions.