Hi all, I have implemented this scheme as part of a protocol I am working on, looking to get some eyeballs & feedback on it.
Assume Alice and Bob want to talk, Alice & Bob share public keys and send each other shared secret ciphertext, and establish a shared secret to be used for chacha20poly1305.
Now every now and then, Alice and Bob, rotate their public-keys and the shared secret which is used for chacha20poly1305,
But this time, they do not send public-keys and shared secret ciphertext in the open, instead, they use previous shared secret to encrypt the new public-keys and new shared secret ciphertext.
And so on and so fourth.
So basically, they "initialize" in the open, then they protect the public-keys and ciphertext using chacha20poly1305
The reason I implemented this, is to provide much better gurantee of quantum-safety incase the asymmetric algorithm in question gets cracked, but it so happens that the initializion was not intercepted (server was good, but then seized/hacked,etc.)
What are your thoughts on this? I have oversimplified it a lot, just tried to get point across, and get some eyesballs on it.