3 ms·

Aren’t the “fallback” modifiers in Noise a form of negotiation? http://noiseprotocol.org/noise.html#handshake-pattern-name-section http://noiseprotocol.org/nois

• tptacek 8y ago
  Not the way we normally think of negotiation, I don't think? Like: you don't use fallback patterns to switch ciphersuites. Another way to think about it, and maybe I'm misapprehending something about Noise, is that whatever you're falling back "to" in a handshake is also a documented part of the same protocol. The fallback patterns would presumably (all things being equal) "survive" a versioning of the whole protocol.