encryption??? about herald HOT 3 CLOSED

This would have worked but actually misses a lot of the nice security properties of double ratchet.

The current plan is to implement double ratchet sessions, with sender keys for groups. We'll also be using crypto primitives from libsodium for symmetric key operations (e.g. kdf, mac, stream encryption), and we'll probably use it for signatures as well (though I'm open to the suggestion of using e.g. falcon for signing, lattice signature schemes seem less mature than encryption schemes so I'm inclined to stick with EdDSA from libsodium).

from herald.

New message format is actually server metadata + xsalsa20poly1305 encrypted message body.

from herald.

Closing this - we'll be using libsodium primitives, through the bindings provided by sodiumoxide. Implementation is in the chainmail repo, I'll probably give the protocol a more thorough write-up once it's had a few weeks to stabilize.

from herald.