Noise module for boxes. Boxes encrypt standalone messages to a receiver's public key. To encrypt a message in a box, use the seal and open primitives.

This module exports a simple, high-level interface for communicating with boxes securely and easily. For a full tutorial, see Crypto.Noise.Tutorial.

Noise boxes encrypt standalone messages to a receiver identified by a public key. When used, they have the following properties:

Sender forward secret

After encryption of a Noise box, only the recipient can decrypt it (the sender cannot).

Deniable

The recipient of a Noise box can authenticate the sender, but cannot produce digitally-signed evidence binding the sender to anything.

Identity hiding

Noise boxes reveal no information about the sender or recipient to a 3rd-party observer.

High speed

Noise usues high-speed curves and ciphers designed by Dan Bernstein.

Padded

Noise ciphertext can be padded to avoid leaking plaintext lengths.

Built on "Encrypt-then-MAC" authenticated encryption

Any tampering with ciphertext will cause the recipient to reject the ciphertext prior to decryption.

Internally, Noise uses SHA512, ChaCha20/8, Poly1305, and an ECDHE function. (As of this writing, this package uses Curve25519. The true specification mandates Curve41417, which features a higher, > 200 bit security level.)