X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=doc%2Fhandshake.texi;h=75a65085f712082136675d6b34dc54860db1cd54;hb=0e482169576b59168f44e509863e6b6acbca6f6d;hp=3efe97d636b470fd05632db271fc73164707d588;hpb=1fea06143f0580f3d40a9ddbb1425ab613910155;p=govpn.git diff --git a/doc/handshake.texi b/doc/handshake.texi index 3efe97d..75a6508 100644 --- a/doc/handshake.texi +++ b/doc/handshake.texi @@ -1,27 +1,12 @@ @node Handshake -@cindex Handshake -@cindex Handshake protocol -@cindex Diffie-Hellman -@cindex ed25519 -@cindex curve25519 -@cindex Elligator -@cindex Perfect Forward Secrecy -@cindex PFS -@cindex IDtag -@cindex Shared key -@cindex DH-EKE -@cindex DH -@cindex EKE -@cindex A-EKE -@cindex DH-A-EKE @section Handshake protocol @verbatiminclude handshake.utxt -Each handshake message ends with so called @code{IDtag}: it is an XTEA -encrypted first 64 bits of each message with client's @ref{Identity} as -a key. It is used to transmit identity and to mark packet as handshake -message. +Each handshake message ends with so called @code{IDtag}: it is +BLAKE2b-MAC of the first 64 bits of the handshake message, with client's +@ref{Identity} used as a key. It is used to transmit identity and to +mark packet as handshake message. If @ref{Noise, noise} is enabled, then data is padded to fill up packet to MTU's size.