1
$\begingroup$

In the official documentation for the Noise Framework there is a section with an overview of the identity hiding for each pattern. The numbering of properties there, obviously, from weaker properties to strong ones, and the last property is:

  1. An active attacker who pretends to be the initiator and records a single protocol run can then check candidates for the responder's public key.

The NK1 pattern has this property.

NK1 pattern itself
  <- s
  ...
  -> e
  <- e, ee, es
  ->

What does this property mean?

  • What mean check candidates for the responder's public key?
  • How can recording a single run of a protocol help this? (preferably with an example)
  • Why is this property the latest in the list (i.e. supposedly the strongest)?


(here is not any tag related to Noise Framework, this is strange)

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.