Noise Protocol Framework
Noise Protocol Framework 是什么?
Noise Protocol FrameworkA composable framework by Trevor Perrin for building modern, formally analyzable secure channel protocols out of Diffie-Hellman, HKDF, and AEAD — the cryptographic core of WireGuard, Signal's I/O Pipe, and many newer protocols.
The Noise Protocol Framework, designed by Trevor Perrin and now standardized at noiseprotocol.org, is a meta-spec for building secure-channel handshakes from a small, well-understood set of primitives: an elliptic-curve Diffie-Hellman function (typically X25519), a hash (typically SHA-256 or BLAKE2s), an AEAD (typically AES-GCM or ChaCha20-Poly1305), and HKDF-style symmetric mixing. A Noise protocol is identified by a pattern (e.g. `Noise_IK_25519_ChaChaPoly_BLAKE2s`) describing exactly which handshake messages flow in which direction and which pre-shared knowledge each side starts with. Standard patterns cover one-way (`N`), interactive (`XX`, `IK`, `XK`, `NK`), and post-quantum hybrid variants. Noise is the cryptographic core of WireGuard (`Noise_IK_25519_ChaChaPoly_BLAKE2s`), Signal's I/O Pipe, the Lightning Network's BOLT-8, and many newer protocols that want modern, formally analyzable handshakes without inventing custom cryptography. Formal verification work (Bhargavan et al., Donenfeld) and the framework's design constraints make it a popular choice when TLS is too heavy or too flexible.
● 示例
- 01
WireGuard uses `Noise_IK_25519_ChaChaPoly_BLAKE2s` for its one-round-trip mutual authentication between peers with known long-term static keys.
- 02
A peer-to-peer protocol uses Noise XX over QUIC to handshake without exposing peer identities to passive observers.
● 常见问题
Noise Protocol Framework 是什么?
A composable framework by Trevor Perrin for building modern, formally analyzable secure channel protocols out of Diffie-Hellman, HKDF, and AEAD — the cryptographic core of WireGuard, Signal's I/O Pipe, and many newer protocols. 它属于网络安全的 密码学 分类。
Noise Protocol Framework 是什么意思?
A composable framework by Trevor Perrin for building modern, formally analyzable secure channel protocols out of Diffie-Hellman, HKDF, and AEAD — the cryptographic core of WireGuard, Signal's I/O Pipe, and many newer protocols.
Noise Protocol Framework 是如何工作的?
The Noise Protocol Framework, designed by Trevor Perrin and now standardized at noiseprotocol.org, is a meta-spec for building secure-channel handshakes from a small, well-understood set of primitives: an elliptic-curve Diffie-Hellman function (typically X25519), a hash (typically SHA-256 or BLAKE2s), an AEAD (typically AES-GCM or ChaCha20-Poly1305), and HKDF-style symmetric mixing. A Noise protocol is identified by a pattern (e.g. `Noise_IK_25519_ChaChaPoly_BLAKE2s`) describing exactly which handshake messages flow in which direction and which pre-shared knowledge each side starts with. Standard patterns cover one-way (`N`), interactive (`XX`, `IK`, `XK`, `NK`), and post-quantum hybrid variants. Noise is the cryptographic core of WireGuard (`Noise_IK_25519_ChaChaPoly_BLAKE2s`), Signal's I/O Pipe, the Lightning Network's BOLT-8, and many newer protocols that want modern, formally analyzable handshakes without inventing custom cryptography. Formal verification work (Bhargavan et al., Donenfeld) and the framework's design constraints make it a popular choice when TLS is too heavy or too flexible.
如何防御 Noise Protocol Framework?
针对 Noise Protocol Framework 的防御通常结合技术控制与运营实践,详见上方完整定义。
Noise Protocol Framework 还有哪些其他名称?
常见的别称包括: Noise framework, Noise handshake。
● 相关术语
- cryptography№ 352
Diffie–Hellman 密钥交换
一种公钥协议,使两方能够在不安全信道上推导出共享密钥而不实际传输该密钥,其安全性基于离散对数问题的困难性。
- cryptography№ 284
Curve25519
由 Daniel J. Bernstein 设计的蒙哥马利椭圆曲线,用于 RFC 7748 中定义的 X25519 Diffie-Hellman,提供约 128 位安全性。
- cryptography№ 179
ChaCha20-Poly1305
由 ChaCha20 流密码与 Poly1305 一次性认证器组成的 AEAD 结构,在 RFC 8439 中标准化,用于 TLS 1.3 和 WireGuard。
- cryptography№ 021
AEAD (Authenticated Encryption with Associated Data)
A symmetric encryption primitive that provides confidentiality, integrity, and authenticity in one operation, with the ability to bind unencrypted 'associated data' (headers, routing info) to the ciphertext's authentication tag.
- cryptography№ 910
完美前向保密
协议属性,确保长期密钥即便日后泄露也无法解密以前会话的流量。
- network-security№ 1279
TLS(传输层安全)
由 IETF 标准化的加密协议,为两个联网应用之间的通信提供机密性、完整性与认证。