aimed to be reviewable, secure and
@url{https://en.wikipedia.org/wiki/Deep_packet_inspection, DPI}/censorship-resistant.
-@itemize @bullet
+@itemize
@item
Copylefted free software: licenced under
@url{https://www.gnu.org/licenses/gpl-3.0.html, GPLv3+}.
Exchange)).
@item
@ref{Verifier structure, Augmented authentication tokens} resistant to
-offline dictionary attacks. An attacker can not masquerade a client
-even with server passphrase verifiers compromising.
+offline dictionary attacks. They use CPU and memory hardened hashing
+algorithm. An attacker can not masquerade a client even with server
+passphrase verifiers compromising.
@item
Encrypted and authenticated @ref{Transport, payload transport}
with 128-bit @ref{Developer, security margin} state-of-the-art
-cryptography and censorship resistance (indistinguishability from noise).
+cryptography.
+@item
+Optional @ref{Encless, encryptionless mode} of operation: no encryption
+functions are applied for outgoing traffic, but still confidentiality
+preserving encoding. Jurisdictions and courts can force you to reveal
+encryption keys or sue for encryption usage.
+@item
+Censorship resistant handshake and transport messages: fully
+indistinguishable from the noise with optionally hidden packets lengths.
@item
@url{https://en.wikipedia.org/wiki/Forward_secrecy, Perfect forward secrecy}
property.
@item
Built-in rehandshake (session key rotation) and heartbeat features.
@item
-Ability to hide payload packets length with the @ref{Noise, noise} data.
+Ability to hide packets length with the @ref{Noise, noise} data.
@item
Ability to hide payload timestamps with @ref{CPR, constant packet rate}
traffic.