Pay attention how to get development source code.
DH-A-EKE powered by Curve25519 and Ed25519.
Balloon hashing based on BLAKE2b-256.
Chaffing-and-Winnowing (two Poly1305 MACs for each bit of message) over 128 bits of All-Or-Nothing-Transformed (based on OAEP using ChaCha20 with BLAKE2b-256 based SAEP+ checksums) data with 128-bits of feeded random.
25 bytes per packet. Plus 4128 bytes and noise in encryptionless mode.
4 UDP (2 from client, 2 from server) packets (round-trips for TCP). 264 bytes total payload, 20680 in encryptionless mode.
832 bits in average on client, 832 bits in average on server side per handshake. 128 bits for each outgoing packet in encryptionless mode.
|• Verifier structure:|
|• Transport protocol:|
|• Handshake protocol:|