Fast strong @ref{PAKE, passphrase authenticated} augmented
@ref{Handshake, key agreement protocol} with zero-knowledge mutual peers
authentication (PAKE DH A-EKE (Diffie-Hellman Augmented Encrypted Key
-Exchange)), censorship resistant (indistinguishable from noise, with
-hidden packet's length).
+Exchange)).
@item
@ref{Verifier structure, Augmented authentication tokens} resistant to
offline dictionary attacks. An attacker can not masquerade a client
@item
Encrypted and authenticated @ref{Transport, payload transport}
with 128-bit @ref{Developer, security margin} state-of-the-art
-cryptography and censorship resistance (indistinguishability from noise
-and hiding of packet's length).
+cryptography.
+@item
+Censorship resistant handshake and transport messages: fully
+indistinguishable from the noise with optionally hidden packets lengths.
@item
@url{https://en.wikipedia.org/wiki/Forward_secrecy, Perfect forward secrecy}
property.