Merge branch 'develop'

[govpn.git] / doc / about.texi

diff --git a/doc/about.texi b/doc/about.texi
index 0d892e28784a40019cd02229d510a478af3d8172..03b5c8966a526ed880bd34b780282128e253b874 100644 (file)
--- a/doc/about.texi
+++ b/doc/about.texi
@@ -2,7 +2,7 @@ GoVPN is simple free software virtual private network daemon,
 aimed to be reviewable, secure and
 @url{https://en.wikipedia.org/wiki/Deep_packet_inspection, DPI}/censorship-resistant.
 
-@itemize @bullet
+@itemize
 @item
 Copylefted free software: licenced under
 @url{https://www.gnu.org/licenses/gpl-3.0.html, GPLv3+}.
@@ -13,12 +13,21 @@ authentication (PAKE DH A-EKE (Diffie-Hellman Augmented Encrypted Key
 Exchange)).
 @item
 @ref{Verifier structure, Augmented authentication tokens} resistant to
-offline dictionary attacks. An attacker can not masquerade a client
-even with server passphrase verifiers compromising.
+offline dictionary attacks. They use CPU and memory hardened hashing
+algorithm. An attacker can not masquerade a client even with server
+passphrase verifiers compromising.
 @item
 Encrypted and authenticated @ref{Transport, payload transport}
 with 128-bit @ref{Developer, security margin} state-of-the-art
-cryptography and censorship resistance (indistinguishability from noise).
+cryptography.
+@item
+Optional @ref{Encless, encryptionless mode} of operation: no encryption
+functions are applied for outgoing traffic, but still confidentiality
+preserving encoding. Jurisdictions and courts can not either force you
+to reveal encryption keys or sue for encryption usage.
+@item
+Censorship resistant handshake and transport messages: fully
+indistinguishable from the noise with optionally hidden packets length.
 @item
 @url{https://en.wikipedia.org/wiki/Forward_secrecy, Perfect forward secrecy}
 property.
@@ -27,7 +36,7 @@ Replay attack protection (using one-time MACs).
 @item
 Built-in rehandshake (session key rotation) and heartbeat features.
 @item
-Ability to hide payload packets length with the @ref{Noise, noise} data.
+Ability to hide packets length with the @ref{Noise, noise} data.
 @item
 Ability to hide payload timestamps with @ref{CPR, constant packet rate}
 traffic.
@@ -51,9 +60,9 @@ Optional built-in HTTP-server for retrieving real-time
 @ref{Stats, statistics} information about known connected peers in
 @url{http://json.org/, JSON} format.
 @item
-Written on @url{http://golang.org/, Go} programming language with
+Written on @url{https://golang.org/, Go} programming language with
 simple code that can be read and reviewed.
 @item
 @url{https://www.gnu.org/, GNU}/Linux and
-@url{http://www.freebsd.org/, FreeBSD} support.
+@url{https://www.freebsd.org/, FreeBSD} support.
 @end itemize