The X3DH spec says that salt (presumably the nonce) is supposed to be [0, 0, ..., 0] with the length of the hash. I seem to have skipped over that. From Section 2.2: "HKDF salt = A zero-filled byte sequence with length equal to the hash output length." |
||
|---|---|---|
| .. | ||
| src | ||
| omemo_dart.dart | ||